Jump to content

This is the support site for Andrews & Arnold Ltd, a UK Internet provider. Information on these pages is generally for our customers but may be useful to others, enjoy!

FireBrick Road Warrior OSX: Difference between revisions

m
no edit summary
mNo edit summary
mNo edit summary
 
 
It is possible to connect an Apple Mac with OSX to a FireBrick over IPSEC with IKEv2 and EAP. Regrettably the IPSEC facilities within OSX before version 'El Capitan' are not fully enough featured to achieve this alone, so some additional VPN client software can be installed called StrongSwan. Details below describe how to install the CA certificate from the FireBrick to your Apple computer and then how to set up the VPN connection either by using El Capitan's built in VPN settings or by using StronSwan.
 
If you have ''''El Capitan'''' then the built in VPN connection settings should just word. You will still need to install the Certificate as below though, you can skip the StrongSwan part and just use the Network Settings to add a VPN IKEv2 connection.
 
== Downloading & installing the StrongSwan Native Client ==
 
Visit [http://download.strongswan.org/osx/ the download site] and download the latest binary. At the time of writing the latest version was '''strongswan-5.3.2-1.app.zip'''. Allow the machine to unarchive it; usually by selecting the "Open with Archive Utility" option. This will deposit the StrongSwan.app into your downloads directory. Drag the app from the downloads directory into your Applications folder. This completes installation of the StrongSwan Client.
 
<gallery>
StrongSwanOSXscreenshot.png|strongSwan OSX
</gallery>
 
== Getting the CA from the FireBrick ==
</gallery>
 
=OSX versions 10.11, 'El Capitan' and above=
If you have ''''El Capitan'''' then the built in VPN connection settings should just word. You will still need to install the Certificate as below thoughabove, but you can skip the StrongSwan partparts below and just use the Network Settings to add a VPN IKEv2 connection.
 
==Create the Connection==
#Go to Apple Menu - System Preferences
#Go to Network
#Click the + Icon on the bottom/left, and choose:
#*Interface: VPN
#*VPN Type: IKEv2
#*Service Name: eg 'FireBrick' or 'Office'
#On the next window fill in the information.
 
=OSX version 10.10,'Yosemite' and below=
For versions before 10.11 you'll need to use the StronSwan program:
 
== Downloading & installing the StrongSwan Native Client ==
 
Visit [http://download.strongswan.org/osx/ the download site] and download the latest binary. At the time of writing the latest version was '''strongswan-5.3.2-1.app.zip'''. Allow the machine to unarchive it; usually by selecting the "Open with Archive Utility" option. This will deposit the StrongSwan.app into your downloads directory. Drag the app from the downloads directory into your Applications folder. This completes installation of the StrongSwan Client.
 
<gallery>
StrongSwanOSXscreenshot.png|strongSwan OSX
</gallery>
==Configure strongSwan==
Run strong swan by either:
autoreview, Bureaucrats, editor, Interface administrators, reviewer, Administrators
12,264

edits