如何设置IPSec VPN客户端

28,194条回复

简介

使用VPN，可以让你随时随地，通过加密的隧道，安全访问公司内网资源。

我们使用基于IPSec最新的协议IKEv2来实现VPN。这个协议提供了更可靠快速的认证，以及漫游不同网络的能力。更方便的是，很多常用操作系统，如Window 7以上，macOS，iOS都内置了官方的客户端，使用起来也非常顺畅便捷。

本文介绍了如何在Windows, macOS, Ubuntu, iOS和安卓上设置VPN客户端的方法。

预先准备

下载CA证书
- 使用Creekside Networks网管服务的客户，请点击下载证书文件creekside .authority.cer。
从你的网管那里获取连接参数
- VPN服务器的域名，类似‘vpn.creekside.network’形式；
- 你的VPN账户名和密码；
使用安卓手机的客户请下载客户端
- Strongswan安卓客户端2.3.0

Windows10

安装证书

Windows10安装证书的手续略为复杂，请参考以下胶片（点击左右侧箭头可翻页）。

1. 搜索应用程序mmc.exe并以管理员身份运行

2. 从文件菜单，选择添加/删除管理单元

3. 从左侧选择“证书”，然后点击中间的“添加”按钮

4. 选择计算机账户，然后点击下一步

5. 选择本地计算机，然后点击完成

6. 返回证书管理页面

7. 浏览到受信任的根证书颁发机构，鼠标右键，在所有任务菜单下，选择导入

8. 进入证书导入向导

9. 在文件名输入框右侧，点击浏览

10. 找到你之前下载的证书文件，点击打开

11. 浏览择证书保存选择选项，并选择受信任的根证书

12. 恭喜你，完成了证书导入流程

设置连接

Windows已经内置了IKEv2 VPN客户端。你需要在第4步里填写你收到的VPN服务器设置信息：

VPN服务商：选”Windows内置”
连接名称：你可以自定义便于记忆的名称
服务器名称或地址：填写服务器域名
VPN类型：选择“IKEv2”
登录类型：账户名和密码
账户名：你的账户名

1. 从任务条右下角，点击网络连接图标。

2. 点击左侧的VPN选项。

3. 右边VPN页面下，选择添加VPN

4. 根据前面说明，填写相应的内容。不要使用图片中的信息。

5. 你已完成设置，使用连接启动VPN。

通过VPN访问互联网

IKEv2自动支持split tunnel功能，也就是只有远程网络才走VPN隧道，互联网流量还是走本地网关。在某些应用场景下，如果你希望使用公司的网络来访问互联网，就可以根据以下步骤完成进一步的配置。

1. 在 VPN 页面下, 点击相关设置下的 更改适配器选项

2. 鼠标右键点击VPN连接, 然后从下拉菜单中选择属性。

3.在对话框中，选择网络分页，然后选择TCP/IPv4一行，点击属性。

4. 点击右下方的 高级...

5. 勾选在远程网络上使用默认网关，取消勾选自动跃点，并在下方的输入框内填入数字1

Android

Android没有原生客户端，需要下载，并按以下步骤安装。

在应用商店里搜索 “Strongswan VPN Client” 并安装。你也可以从这里下载APK文件并手动安装。

1. 下载Strongswan VPN客户端

通过邮件，或者点击这个链接，下载证书文件到手机，并点击打开。

2. 保存证书文件到手机

选择右侧的证书安装工具，安装证书。

3. 安装证书

你可以用任何字符串命名你的证书，在证书用途上选择VPN应用。然后点击“OK”完成证书安装。

4. 配置证书

打开“Strongswan”应用程序。因为是第一次使用，页面会显示“无活跃VPN”。点击右上角的“添加VPN配置”。

5. 添加VPN配置

输入合适的配置参数（图例只是参考）
- 服务器地址: 输入发送给你的域名.
- VPN 类型: “IKEv2 EAP(用户名/密码)”
- 用户名: 你收到的用户名
- 密码: 你收到的密码
- CA证书: 确认“自动选择”已勾选.（缺省）

完成后保存。

6. 配置VPN连接

回到主页面，点击相应的VPN配置，即可连接到VPN服务器。

7. 连接到VPN服务器

macOS

首先按以下步骤安装证书：

双击下载的证书文件。钥匙串访问应用会自动弹出一个对话框，并提示“钥匙串访问正在尝试修改系统钥匙串。输入密码以允许此次操作“
输入你的计算机密码，然后点击修改钥匙串
双击刚才新引入的VPN证书Creekside Networks Authority。一个参数设置窗口会弹出来，点击信任左侧的箭头，然后在IP安全 (IPSec)一栏中，把缺省的用不信任改成始终信任。
系统会再次要求你输入密码确认。确认完成后，刚才的改变会自动被保存下来。证书导入完毕。

接下来我们设置VPN连接。

打开系统偏好设置，选择网络；
点击左侧网络列表框下面的“+“号；
在弹出的对话框里
- 选择接口为VPN；
- VPN类型缺省是IKEv2，这个不要改；
- 在服务名称项目里，你可以输入任何你喜欢的名字；
- 完成后点击创建；
在新的连接页面里，
- 服务器地址：输入管理员发给你的域名；
- 远程ID：和上述服务器地址一样的域名；
- 本地ID：保持空白；
- 点击认证设置…，在对话框里输入：
  - 用户名：你的VPN用户名；
  - 密码：你的VPN密码；
  - 完成后，点击“好”
- 回到连接页面后，点击应用以保存刚才的设置；
- 点击连接，你就会连接到VPN服务器了。

iOS

按照以下步骤配置VPN：

使用隔空投送把证书文件发送到你的手机；
一个对话框会自动弹出来，如果你有Apple Watch, 会首先提示你选择选择要安装的设备，选择iPhone，系统会提示描述文件已下载。
打开设置应用，找到通用并打开
- 向下滑动到描述文件一行出现，点击打开；
- 在已下载的配置描述文件下方的列表里，点击Creekside Networks Authority一项；
- 在随后出现的安装描述文件页面中，点击右上角的安装按钮；
- 输入你的锁屏密码
- 再次点击安装，证书安装就完成了。
回到通用页面，我们开始配置VPN连接：
- 向下滑动到VPN一行，点击打开；
- 在页面的最后一行，点击添加VPN配置…，进入添加配置页面
  - 类型：使用缺省的IKEv2
  - 描述：VPN连接的名称，填写你公司的名称或者任意名字；
  - 服务器地址：输入管理员发给你的域名
  - 远程ID：和上述服务器地址一样的域名
  - 本地ID：保持空白
  - 用户鉴定：保持用户名不变
  - 用户名：你的VPN用户名；
  - 密码：你的VPN密码；
  - 最后点击左上角的完成，
- 回到VPN页面
  - 点选刚才设置的VPN连接；
  - 在状态一栏，点击未连接右侧的开关；
  - 你就会连接到VPN服务器了。

Ubuntu

Ubuntu 16.04

首先，我们要下载Strongswan源码，编译并安装:

cd ~
sudo apt-get install -y libssl-dev libglib2.0-dev libnm-dev
wget http://download.strongswan.org/strongswan-5.6.3.tar.bz2
tar xjf strongswan-5.6.3.tar.bz2
cd ~/strongswan-5.6.3
./configure --sysconfdir=/etc --prefix=/usr --libexecdir=/usr/lib \
   --disable-aes --disable-des --disable-md5 --disable-sha1 
   --disable-sha2 --disable-fips-prf --disable-gmp --enable-openssl \
   --enable-nm --enable-agent --enable-eap-gtc --enable-eap-md5 \
   --enable-eap-mschapv2 --enable-eap-identity
make
sudo make install

然后是NetworkManager的Strongswan插件。

cd ~
sudo apt-get install -y intltool libgtk-3-dev libsecret-1-dev \
  libnma-dev network-manager-dev libnm-util-dev libnm-glib-dev \
  libnm-glib-vpn-dev libnm-gtk-dev

wget http://download.strongswan.org/NetworkManager/NetworkManager-strongswan-1.4.4.tar.bz2

tar xjf NetworkManager-strongswan-1.4.4.tar.bz2
cd ~/NetworkManager-strongswan-1.4.4
./configure --sysconfdir=/etc --prefix=/usr --libexecdir=/usr/lib

make
sudo make install

Ubuntu 18.04

我们先下载官方的Strongswan以及相应的NeworkManager插件。

sudo apt install -y strongswan libcharon-extra-plugins network-manager-strongswan

Setup VPN connections

VPN客户端安装好了，接下来是配置VPN连接。

Open System Settings, then select Network;
- Ubuntu 16.04:
  - Click the + sign at the left-bottom corner, choice Interface type to VPN, then click Create;
- Ubuntu 18.04
  - Click the + sign at the right side of VPN list.
A VPN connection type dialog box will pop out, choose IPSec/IKEv2 (Strongswan), click Create;
- Now a configuration dialog box will pop out. fill in information as directed below;
  - Name: Any text you like to name the VPN connection
  - Gateway
    - Address: The VPN server’s domain name IT sent to you.
    - Certificate: Browse to choose the certificate file you received.
  - Client
    - Authentication: Select “EAP”
    - Username: Use the userid that is given to you.
    - Password:
      - Click the icon at the end of input box.
      - Select the 2nd option: Store the password for all users.
      - Input your password
  - Options:
    - Make sure you check the “Request an inner IP address”.
    - Optionally you may also check Enforce UDP encapsulation
    - Leave use IP compression unchecked.
  - Cipher Proposals
    - Leave this section blank.
- Finally click the “Add” button to save the configuration.

《如何设置IPSec VPN客户端》有28,194个想法

you can try here 2021年4月8日上午9:46

Filing for Phase 7 Personal bankruptcyFiling for Chapter 7 bankruptcy is the most basic phase. To start the process, you need to fill in a 300-page type with complicated directions as well as fill in a layaway plan with the bank. This is not an uphill struggle when you contrast i

回复 ↓
check over here 2021年4月8日上午9:45

Evidence of delivery is going to be USPS or other shipper monitoring data. In case the item is broken in transit Will probably be your duty to take care of situation with shipping and delivery company. Payment We settle for the following payment procedures: PayPal Make sure you Speak to us Should yo

回复 ↓
gb whatsapp 2021年4月8日上午9:45

It has constantly been difficult to captivate and maintain an viewers on the Web. The different approaches to use social media every single has strengths and weaknesses. Social me

回复 ↓
gb whatsapp 2021年4月8日上午9:44

Individuals interact in different ways than they employed to, many thanks to social media. Facebook and Twitter are fantastic sites for folks

回复 ↓
click for more 2021年4月8日上午9:44

The again is covered with cork to protect your furniture. This listing is with the merchandise shown, but I can put any image you wish with a coaster. They make wonderful presents and so are fun to collect and Screen. Let’s make one thing great!Your latest Texas driver license or ID card.

回复 ↓
How to Hack marvel strike force 2021年4月8日上午9:43

Main battles involve the usal strategy of picking a target and an attack,
letting recreation do the remainder.

回复 ↓
https://pasang-iklan.web.id/produk-cv-amanah-transporter/#comment-item-245|http://2udn.com/?p=15852# 2021年4月8日上午9:43

Filing for Phase 7 InsolvencyFiling for Phase 7 personal bankruptcy is the simplest chapter. To begin the process, you require to fill out a 300-page form with complicated guidelines and fill out a payment plan with the bank. This is not a difficult task when you contrast it to f

回复 ↓
Luxury Watch Parts Replacement|Replacement Watch Parts 2021年4月8日上午9:42

Fast TakeHamilton, already referred to as the watch of Hollywood, has extra just lately turn out to be synonymous with high-value, manual-wind, vintage-inspired watches. There is, after all, the well-covered and much-loved Khaki Field Mechanical, and the extra area of interest (however no much

回复 ↓
-- 2021年4月8日上午9:41

This excellent website certainly has all the information and facts I needed about this subject and didn’t know
who to ask.

回复 ↓
daftar togel 2021年4月8日上午9:39

This web site definitely has all of the info I needed about this subject and didn’t know who to ask.

回复 ↓
Replacement Watch Parts 2021年4月8日上午9:39

It was once only two weeks in the past that Grand Seiko introduced its newest crop of watches, together with a variety of items that includes new calibers and a handful of top-end restricted editions that push up in opposition to the limits of the brand’s standard wheelhouse. It were given us consid

回复 ↓
best university in indonesia 2021年4月8日上午9:38

What’s Happening i am new to this, I stumbled upon this I have discovered It absolutely helpful and it has helped me out loads.
I’m hoping to give a contribution & aid other users like its helped me.

Good job.

回复 ↓
บาคาร่า 2021年4月8日上午9:35

I like reading a post that can make people think. Also, many thanks for allowing for me to comment!

回复 ↓
Pingback引用通告： 9ztb7超棒的小说劍仙在此- 第四章、教习，我想修炼閲讀-p2hfoO – 民鈺看書
Leke Kremi 2021年4月8日上午9:34

Sizde oldukça net üzerinden araştırma yaparak leke kremi markasını mı araştırıyorsunuz?
Cilt lekeleri ve tüm vücüdunuzda oluşan lekelere karşı en iyi leke kremini lekekremim.com dan temin edebilirsiniz!

回复 ↓
click for more 2021年4月8日上午9:32

Previous is the “Journey to Excellence” spot, exactly where just The latest decades’ award should be. There isn’t any requirement To place every patch there– just the current year is necessary!Received our patches Friday, late within the working day. What a shock when I opened the deal an

回复 ↓
Pingback引用通告： 5dj5b熱門小说劍來討論- 第七十二章黑云鑒賞-p1gZhq – 晉秀站讀
Spotloan 2021年4月8日上午9:30

[url=https://writemypaper.us.com/]linda help essays[/url]

回复 ↓
Pingback引用通告： u2m14火熱連載小说 – 第78章周姐姐讀書-p2VnE4 – 賢紫文字
Free V BUCKS 2021年4月8日上午9:30

WOW just what I was searching for. Came here by searching for Free V BUCKS
http://www.referendum-tunisie.org/

回复 ↓
a-z business directory 2021年4月8日上午9:30

If you are able to create a solid company listing, interested purchasers will certainly be much more likely to call you. The manner in which you word your listing has a significant impact on the perception a buyer will certainly have of your company. Inside your Google My Company account be sure to

回复 ↓
Bettye Benjafield 2021年4月8日上午9:29

you are truly a just right webmaster. The website loading pace
is incredible. It kind of feels that you are doing any distinctive trick.
In addition, The contents are masterpiece. you’ve
performed a wonderful process in this topic!

回复 ↓
Pingback引用通告： 1jmvj有口皆碑的小说超神機械師齊佩甲- 866 告一段落与施压讀書-p317Ei – 茂成資料
correx 2021年4月8日上午9:28

Pretty portion of content. I simply stumbled upon your web site and in accession capital to say
that I acquire actually enjoyed account your blog posts.
Anyway I will be subscribing to your feeds and even I success you get admission to constantly quickly.

Here is my blog correx

回复 ↓
성인용품 2021年4月8日上午9:25

Sweet blog! I found it while searching on Yahoo News.
Do you have any suggestions on how to get listed in Yahoo News?
I’ve been trying for a while but I never seem to get there!
Thanks

回复 ↓
Payday Loans 2021年4月8日上午9:23

[url=http://metlending.com/]fast cash[/url]

回复 ↓
Lisajek 2021年4月8日上午9:23

[url=https://viagrarb.com/]viagra buy india[/url]

回复 ↓
Nursery Rhymes 2021年4月8日上午9:21

Hello, just wanted to tell you, I enjoyed this post. It was
inspiring. Keep on posting!

回复 ↓
Call Center Outsourcing 2021年4月8日上午9:19

You need to take part in a contest for one of the most useful blogs on the web.
I am going to highly recommend this web site!

Also visit my blog … Call Center Outsourcing

回复 ↓
https://www.mixcloud.com/lizily/ 2021年4月8日上午9:18

Thame Gazette is an author in the England, It also has the directory site area where you can provide business totally free. Lurgan Mail assists the businiess people by supplying teh cost-free UK service directory site submission. It also covers the subjects like Sporting activity, Lifestlye, News, e

回复 ↓
https://sites.google.com/view/lizily/home 2021年4月8日上午9:15

Nowadays your selection may come down to the visual differences in between the user interfaces, or whether you discover Road View or Overpass a more attractive AR experience. When we first compared these two mapping services in 2012, Google surpassed Apple in every category. But Apple Maps has signi

回复 ↓
Payday Loans Online 2021年4月8日上午9:14

[url=https://crisloans.com/]payday loans direct lender no teletrack[/url]

回复 ↓
Buy Luxury Watches|Buy New & Pre-Owned Patek Philippe Watches 2021年4月8日上午9:12

Fast TakeHamilton, already referred to as the watch of Hollywood, has extra just lately turn out to be synonymous with high-value, manual-wind, vintage-inspired watches. There is, after all, the well-covered and much-loved Khaki Field Mechanical, and the extra area of interest (however no much

回复 ↓
Pay Day Loan 2021年4月8日上午9:11

[url=https://metlending.com/]small business loans[/url]

回复 ↓
Rosemary Goe 2021年4月8日上午9:10

Great blog here! Also your website loads up fast!
What host are you using? Can I get your affiliate link
to your host? I wish my web site loaded up as quickly as yours lol

回复 ↓
how to celebrate feast of trumpets as a christian 2021年4月8日上午9:07

I am really grateful to the holder of this web page who has shared this wonderful post at at
this place.

回复 ↓
Ernestgag 2021年4月8日上午9:06

cialis generic 20mg cialis price from canada cialis soft tabs canada

回复 ↓
купить хорошие ссылки 2021年4月8日上午9:05

Искали информацию про биржа временных ссылок или возможно про что такое обратные ссылки на сайт
и купить ссылки из социальных сетей?
Тогда Вы попали на тот сайт, где найдете
тольк опро правильно купить ссылки,
а также про купить размещение ссылок
и про купить ссылки с социальных сетей.

Больше информации на seosecretservice.top

回复 ↓
aff login 2021年4月8日上午9:03

Hey I know this is off topic but I was wondering if you knew of any widgets I
could add to my blog that automatically tweet my newest twitter updates.

I’ve been looking for a plug-in like this for quite some time
and was hoping maybe you would have some experience with something like this.
Please let me know if you run into anything. I truly enjoy reading your blog and I look forward to your new updates.

回复 ↓
Loans 2021年4月8日上午9:02

[url=http://crisloans.com/]personal loans for bad credit[/url]

回复 ↓
Bentzen Hegelund 2021年4月8日上午9:01

You may have educated numerous pets in the past, yet nothing can prepare you for elevating your brand-new feline buddy. Pet cats are nothing like canines. They call for even more attention during their expanding years and more individual time playing with their proprietor. This short article will ce

回复 ↓
https://www.avvo.com/attorneys/91790-ca-david-lozano-164721.html|https://www.linkedin.com/in/david-lozano-82a472170 2021年4月8日上午9:00

Some Never ever Utilize a Legal Representative When Filing for Personal bankruptcySome people and also firms have a tendency to choose a much less experienced personal bankruptcy attorney, no matter whether you have financial obligation problems or you have actually filed bankruptcy in the

回复 ↓
Getting A Loan 2021年4月8日上午8:58

[url=https://paydayadva.com/]same day payday[/url]

回复 ↓
Best Men's Business Casual 2021年4月8日上午8:56

Pretty! This has been an incredibly wonderful post. Thanks for supplying these
details.

my web blog … Best Men’s Business Casual

回复 ↓
Lisajek 2021年4月8日上午8:56

[url=https://extracialis.com/]price of tadalafil 10mg[/url]

回复 ↓
https://www.pinterest.com/lizilybusiness/ 2021年4月8日上午8:53

Here are 8 main concerns you require to ask the brokers who intend to represent your sale. Throughout the process of a sale, we remain to ask questions. Specifics about your and your duty, along with specifics concerning business, its customers as well as efficiency. Your organization continuously a

回复 ↓
Payday 2021年4月8日上午8:51

[url=http://indxcash.com/]how does debt consolidation work[/url]

回复 ↓
a business directory website 2021年4月8日上午8:51

Still a prominent web site, it’s ranked in the leading 500 for the UK, so it’s somewhere that you desire your service information to feature. NAP– Name, Address, Phone Number– so always verify that you’re making use of the appropriate details as it’s important if you want to rate well for your loc

回复 ↓
https://union.instructure.com/eportfolios/1309/Home/NS0402_PDF_To_Obtain_Certification_effortlessly_Score 2021年4月8日上午8:44

Hi there to every body, it’s my first pay a quick visit of
this web site; this blog consists of awesome and really excellent data designed for visitors.

回复 ↓
Money Loan 2021年4月8日上午8:39

[url=http://rococash.com/]online signature loans[/url]

回复 ↓