ikev2 with two different Radius domains

Norman · February 18

hello,

i have set up two radius domains

for sslvpn i can login with both

domain1.com is default

domain2.com\username also works

for ikev2 the firebox is always adding the default domain @domain1.com , like

domain2.com\username@domain1.com , which fails of course

james.carson · February 19

Hi @Norman
If you wish to use an alternate authentication server for the IKEv2 VPN, you'll need to specify the username as server\username. The 'server' portion must match the RADIUS server's name exactly as it is defined in the Authentication settings.

You can see examples of this near the bottom of this article:
https://www.watchguard.com/help/docs/help-center/en-us/Content/en-US/Fireware/mvpn/ikev2/mvpn_ikev2_windows_client.html

Norman · February 23

with ikev2 , the second realm must not be a domain name like domain2.com
without the .com or other country top level it works fine.

ikev2 with two different Radius domains

Comments