strongswan eap-tls client

Quest Set up a strongswan vpn client on an Ubuntu 24.04 PC using network management GUI. The strongswan server only accept EAP-TLS authentication. Process bash command history 1 2 3 4 5 6 7 8 9 10 11 12 13 14 # install packages sudo apt update && sudo apt install libcharon-extra-plugins network-manager-strongswan strongswan-nm mkdir sw-vpn cd sw-vpn # download client certifacte and private key scp server_vpn:cmd-cmd-pc.tar.gz . # fix MTU issue vim custom.sh sudo cp custom.sh /etc/NetworkManager/dispatcher.d/01-vpn-mtu sudo chmod +x /etc/NetworkManager/dispatcher.d/01-vpn-mtu rm cmd-cmd-pc.tar.gz ls -alh /etc/NetworkManager/dispatcher.d/01-vpn-mtu cat /tmp/vpn_mtu_debug.log mtu fixer The custom.sh file ...

April 12, 2026 · datewu

My WireGuard VPN Headache

Why GitHub Hated My MTU (And How I Fixed It) Let me tell you about the frustrating day I spent wrestling with my WireGuard VPN and why GitHub decided to be the only site that wouldn’t play nice. I’m hoping my experience, especially if you’re running WireGuard in a microk8s environment like I was, can save you some headaches. The Setup: microk8s, Ubuntu, and WireGuard My setup was a bit complex. I had a microk8s cluster running on an Ubuntu 24.04.2 LTS server node (GNU/Linux 6.8.0-54-generic x86_64). I was running my WireGuard VPN server as a pod within this microk8s cluster. This added a layer of network complexity that I didn’t initially account for. ...

March 4, 2025 · datewu