Re: [strongSwan] How to improve connection loss when moving from 4G to Wifi?

2019-02-10 Thread Houman
Hi Andreas,

Thank you for your reply.

I am programming the IKEv2 VPN client on iOS myself with the following
settings:

ikev2.authenticationMethod = NEVPNIKEAuthenticationMethod.none

ikev2.deadPeerDetectionRate = NEVPNIKEv2DeadPeerDetectionRate.medium

ikev2.ikeSecurityAssociationParameters.encryptionAlgorithm = .
algorithmAES256

ikev2.ikeSecurityAssociationParameters.integrityAlgorithm = .SHA256

ikev2.ikeSecurityAssociationParameters.diffieHellmanGroup = .group14

ikev2.ikeSecurityAssociationParameters.lifetimeMinutes = 1440

ikev2.childSecurityAssociationParameters.encryptionAlgorithm = .
algorithmAES256

ikev2.childSecurityAssociationParameters.integrityAlgorithm = .
SHA256

ikev2.childSecurityAssociationParameters.diffieHellmanGroup = .
group14

ikev2.childSecurityAssociationParameters.lifetimeMinutes = 1440

I have searched into MOBIKE and apparently, Apple's NEVPNManager is
supporting MOBIKE. Although it's unclear to me if I have to configure it
separately, or is it functioning out of the box. So far I haven't found
anything in the documentation.


Kind Regards,
Houman


On Sun, 10 Feb 2019 at 13:14, Andreas Steffen <
andreas.stef...@strongswan.org> wrote:

> Hi Houman,
>
> actually the IKEv2 MOBIKE mobility protocol does this automatically.
> Does your IPsec peer (VPN gateway) support MOBIKE since strongSwan
> enables it out of the box?
>
> Regards
>
> Andreas
>
> On 09.02.19 17:50, Houman wrote:
> > Hello,
> >
> > I've set up strongSwan U5.6.2/K4.15.0-43-generic on Ubuntu 18.04. It
> > works very well.
> >
> > However is there any way to improve connection or loss of when moving
> > from cellular 4G to WiFi / WiFi to 4G?
> >
> > I thought that IKEv2 could do that seamlessly?
> >
> > Many Thanks,
> >
>
> --
> ==
> Andreas Steffen andreas.stef...@strongswan.org
> strongSwan - the Open Source VPN Solution!  www.strongswan.org
> Institute for Networked Solutions
> HSR University of Applied Sciences Rapperswil
> CH-8640 Rapperswil (Switzerland)
> ===[INS-HSR]==
>
>


Re: [strongSwan] How to improve connection loss when moving from 4G to Wifi?

2019-02-10 Thread Andreas Steffen
Hi Houman,

actually the IKEv2 MOBIKE mobility protocol does this automatically.
Does your IPsec peer (VPN gateway) support MOBIKE since strongSwan
enables it out of the box?

Regards

Andreas

On 09.02.19 17:50, Houman wrote:
> Hello,
> 
> I've set up strongSwan U5.6.2/K4.15.0-43-generic on Ubuntu 18.04. It
> works very well.
> 
> However is there any way to improve connection or loss of when moving
> from cellular 4G to WiFi / WiFi to 4G?
> 
> I thought that IKEv2 could do that seamlessly?
> 
> Many Thanks,
> 

-- 
==
Andreas Steffen andreas.stef...@strongswan.org
strongSwan - the Open Source VPN Solution!  www.strongswan.org
Institute for Networked Solutions
HSR University of Applied Sciences Rapperswil
CH-8640 Rapperswil (Switzerland)
===[INS-HSR]==



smime.p7s
Description: S/MIME Cryptographic Signature