IKEv2

• Configure IKEv2-based Remote Access – http://technet.microsoft.com/cs-cz/library/ff687731(v=ws.10).aspx

pro fungování je potřeba mít certifikát na serveru, který podporuje:

• Common name (CN): Same as the hostname OR IPv4/v6 address that is configured as VPN destination on the VPN client. i.e. if the VPN client is configured with the hostname, then set this as same hostname OR if the VPN client is configured with the IP address, then set this as same IP address.
• Extended Key Usage (EKU): Select “Server Authentication” and “IP Security IKE intermediate”.
• Key Usage: Select Digital signature and Key encipherment.

viz:

• http://www.carbonwind.net/blog/post/ISA-Server-2006-as-a-VPN-server-and-the-selection-of-the-certificate-to-be-used-for-IKE-authentication-for-L2TPIPsec-connections-e28093-a-possible-work-around.aspx
• http://blogs.technet.com/b/rrasblog/archive/2009/06/10/what-type-of-certificate-to-install-on-the-vpn-server.aspx

Error 13806 occurs on the server when:

• The server does not have a certificate installed that is suitable for use with IKEv2.
• The certificate on the server does not have the Key Usage field set to “Digital Signature”.

http://technet.microsoft.com/cs-cz/library/dd941612(v=ws.10).aspx