FireBrick Road Warrior OSX: Difference between revisions

It is possible to connect an Apple Mac with OSX to a FireBrick over IPSEC with IKEv2 and EAP. Regrettably the IPSEC facilities within OSX before version 'El Capitan' are not fully enough featured to achieve this alone, so some additional VPN client software can be installed called StrongSwan. Details below describe how to install the CA certificate from the FireBrick to your Apple computer and then how to set up the VPN connection either by using El Capitan's built in VPN settings or by using StronSwan.

== Getting the CA from the FireBrick ==

'''(This is not needed if you are using Let's Encrypt)'''

== Installing the CA certificate into OSX ==

=OSX versions 10.11 El Capitan, 10.12 Sierra and above=

If you have El Capitan or Sierra then the built in VPN connection settings should just work. If you're not using Let's Encrypt then you will still need to install the Certificate as above, but you can skip the StrongSwan parts below and just use the Network Settings to add a VPN IKEv2 connection.

==Create the VPN Connection==

#Go to Apple Menu - System Preferences

#Go to Network

#Click the + Icon on the bottom/left, and choose:

#*Interface: VPN

#*VPN Type: IKEv2

#*Service Name: e.g. 'FireBrick' or 'Office'

#On the next window fill in the information:

#*Server Address: Hostname or IP of your FireBrick. e.g.: server.example.com

#*Remote ID: The 'FQDN' of the Firebrick as created when you created the Certificate (Usually the full hostname of the FireBrick). e.g.: server.example.com

#*Local ID - leave empty

#In the Authentication Settings:

#*Username: your EAP Username as set on the FireBrick, e.g. fred

#*Password: your EAP Password as set on the FireBrick

#May as well tick 'Show VPN status in menu bar' as you'll then be able to connect etc. from the menu in your top bar

=OSX version 10.10,'Yosemite' and earlier=

== Downloading & installing the StrongSwan Native Client ==

==Configure strongSwan==

==Connect!==