Native Windows 10 VPN

[VolaVolaVola]

Hello,

I have been using Algo for quite some time, and think it is fantastic.

Originally, you would install Algo and get a .ps1 file that you would run in PowerShell which would allow you to run the VPN in Windows 10 natively. I am aware that has now changed such that you should download the WireGuard software and use the file now generated.

Is there a way to continue to run Algo in Windows 10 natively. I tried a fresh install on my Ubuntu 20.04 server, which installed without issues, and then used a previous .ps1 file and inserted the new data (IP, CaCertificateBase64,UserPkcs12Base64,vpnuser and Pkcs12Decryption password) from the files that are still generated by Algo. Whilst this seems to run via PowerShell, I then get a 'policy match error' when trying to connect - is there a simple solution to fixing this, as I'm happy to create the .ps1 file myself going forwards.

Many thanks for any help

[davidemyers]

I'm not a Windows user so I might be wrong about this, but one of the things Algo had to do back when it supported using IPsec with Windows was use weaker encryption. If you look here you can see the encryption settings that used to be used in /etc/ipsec.conf for ike and esp if Windows compatibility was chosen during deployment.

So you might want to try changing those settings in your /etc/ipsec.conf and restarting IPsec with:

sudo systemctl restart strongswan-starter.service

[VolaVolaVola]

Ahh, perfect that seems to have got me a little further - many thanks.

I'm now getting 'ike authentication credentials are unacceptable', unsure if it's me so will try a few things, but expect there is something small somewhere; seems so close.

Many Thanks

[davidemyers]

Look at #1675 and see if maybe a change in that PR needs to be reflected in your script.

[VolaVolaVola]

Spot on, once again. Can't thank you enough.

[st4tic-rr]

Hi! Were you able to get a working configuration for this? I am also needing to get IKEv2 working on Windows: #14662

Thanks in advance.