Create IKEV2 VPN Server in Mikrotik RouterOS- IKEV2 VPN ros路由器搭建

TinyServe

IKEV2 is fast and secure and mobile-friendly VPN protocol.

Since it has no interface, it is a little complex to create.
Here are the steps:
Add CA

Sign It

Add Server Certificate

Sign It with CA

Add Client Certificate

Sign It with CA

Export CA for Clients (for iOS)

Export Client Certificate (for iOS)

Add ip pool for IKEV2 (better calculate online)

Add mode config for Ikev2

Add Proposal for Ikev2

Create Group for Ikev2

Create Policy for Ikev2

Add profile for Ikev2

Add Peers for Ikev2

Add Identity for Ikev2

Now, Ikev2 server in RouterOS is finished.

Download the exported two files, CA and CA client.
And copy to iPhone iCloud .
Install the two certificates.

Add VPN Ikev2 (it is default vpn protocol in iOS)

Done!

admin

GOOD

pranaylokegaonkar

I try this configuration on Android 12 system my phone company is Vivo

all configuration is done successfully in mikrotik after i install required certificate in my mobile phone and it's disconnecting or killing by mikrotik can you please check where is the problame

Mikrotik logs when killing

1) new ike2 SA (R): peer1-ikev2 xxx.xxx.140.208[500]-xxx.xxx.140.224[33407] spi:376caa982653da2b:42b6b2d34cdffe84

2) peer authorized: peer1-ikev2 xxx.xxx.140.208[4500]-xxx.xxx.140.224[49794] spi:376caa982653da2b:42b6b2d34cdffe84

3) acquired 172.16.2.105 address for xxx.xxx.140.224, CA-Client-RouterOS-Ikev2

4) killing ike2 SA: peer1-ikev2 xxx.xxx.140.208[4500]-xxx.xxx.140.224[49794] spi:376caa982653da2b:42b6b2d34cdffe84

TinyServe

Sorry
I do not have a android phone, only tested on iOS.