DrayTek UK Users' Community Forum

Help, Advice and Solutions from DrayTek Users

IKEv2 works in OSX but not in Windows 10. Credentials Unacceptable

  • damnfinecoffee
  • Topic Author
  • Offline
  • New Member
  • New Member
More
14 Nov 2020 15:55 #97706 by damnfinecoffee
Hi,

We have a Vigor 3910, I followed the guide to configure DDNS and IKEv2 and I can connect with no issues via the Smart Client in OSX.
In windows however, with the exact same details, I receive the following error:
IKE authentication credentials are unacceptable.

Does anyone know how to rectify this?
We need to use IKEv2 as I have discovered the speed of every other protocol to be terrible in comparison.

Thanks in advance

Please Log in or Create an account to join the conversation.

More
14 Nov 2020 16:21 #97707 by hornbyp

damnfinecoffee wrote:
In windows however, with the exact same details, I receive the following error:
IKE authentication credentials are unacceptable.


This web site would have you believe it's all down to a certificate error (difference). If it is a certificate issue, I know it can be quite difficult to figure out, exactly which certificate it is using. Otherwise, I did wonder if maybe a Windows Domain name was getting prepended to the username and confusing matters (as in 'Domainname\Username') (bit of a long shot!)

he also wrote:
We need to use IKEv2 as I have discovered the speed of every other protocol to be terrible in comparison.


Interesting information.

Please Log in or Create an account to join the conversation.

  • damnfinecoffee
  • Topic Author
  • Offline
  • New Member
  • New Member
More
14 Nov 2020 16:37 #97708 by damnfinecoffee
Thanks for the info @hornbyp
Do you think this is the same error? Mine doesnt show that error code anywhere..
I even tried to create the connection in windows as opposed to the smart client but this just produced the same error.
I'm not entirely sure what to do in order to rectify this one.

And yes, I have no idea why but my tests so far moving a large file from the office to home have shown the following:
L2TP: 10MB/s
SSL: 25MB/s
IKEv2: 50MB/s (this is about as fast as our office can upload)

Frustrating because the slower protocols connect fine in windows.. typical!

Please Log in or Create an account to join the conversation.

More
14 Nov 2020 18:52 #97710 by hornbyp

damnfinecoffee wrote:
Do you think this is the same error? Mine doesn't show that error code anywhere..


That might be down to the use of SmartVPN client not reporting it?
SmartVPN Client normally just reconfigures the Rasphone entry "To Vigor" (except for SSL), so once you've run it, you can use RasDial, Rasphone or the GUI to re-invoke it. When invoked like that, it should raise the dialogue to 'enable logging' (as seen on that previous webpage).
If not, you used to be able to turn on RAS logging, as per this article . (Granted it's a twenty year old article :shock: - but it might still be pertinent :wink: . Where did the last 20 years go? :cry: )

SYSlog at the Draytek end might reveal something - just doing a compare-and-contrast, with the OSX session.


SSL: 25MB/s



That seems spectacularly fast - for SSL :!:

Please Log in or Create an account to join the conversation.

More
02 Jun 2021 16:32 #99439 by abilitycn
Im also experiencing this issue.

No mention of it anywhere on Draytek KB's so whats the deal?

Please Log in or Create an account to join the conversation.

More
16 Jun 2021 15:52 #99496 by reado
I had this exact issue with Windows 10 and the following solved it for me:

Go into Device Manager, under "Network adapters" and uninstalling every "WAN Miniport" device. When done, click "Action" then "Scan for hardware changes", then try connecting to VPN again.

Please Log in or Create an account to join the conversation.

Moderators: ChrisSami