Skip to main content
packetuser
packetuser
New Member
November 3, 2016
Question

Has anyone successfully deployed IPSEC with IKEv2 for OS X clients?

  • November 3, 2016
  • 1 reply
  • 5267 views

I can find lots of information about IKEv1 working with OS X clients, but not IKEv2.  Since the Forticlient doesn't support IKEv2, I'm using the native IKEv2 implementation in recent OS X, which I believe is a version of Racoon.  The log output from the client is useless - it just gives me a generic error "Failed to find the VPN app for plugin type com.apple.neplugin.IKEv2".

 

I want to use EAP authentication.  EAP is only configurable on the CLI (at least for 5.2.4, which I'm running).  I've matched the DH groups and encryption settings exactly between the Fortigate and the client.  To tweak the client settings you have to use the Apple Configurator to bake a specialty config that you import into the client, because many of the options aren't accessible on the GUI.

 

So, has anyone gotten this to work? 

    1 reply

    Chuck
    Chuck
    New Member
    September 4, 2017

    I have got it to work.

     

    all is working except facetime as I used the apple configurator to setup always-on vpn. still figuring that out.

    Terms & ConditionsAccessibility statement