{"id":336,"date":"2026-04-23T12:39:35","date_gmt":"2026-04-23T09:39:35","guid":{"rendered":"https:\/\/mangen.kitabara.org\/?p=336"},"modified":"2026-04-23T12:40:03","modified_gmt":"2026-04-23T09:40:03","slug":"how-to-configure-windows-ikev2-vpn-client-automatically-use-your-windows-logon-credentials-with-a-watchguard-firebox-and-radius","status":"publish","type":"post","link":"https:\/\/mangen.kitabara.org\/index.php\/how-to-configure-windows-ikev2-vpn-client-automatically-use-your-windows-logon-credentials-with-a-watchguard-firebox-and-radius\/","title":{"rendered":"How to configure Windows IKEv2 VPN client automatically use your Windows logon credentials with a WatchGuard Firebox and RADIUS"},"content":{"rendered":"\n

When the Windows IKEv2 VPN client uses automatic logon, it sends credentials as DOMAIN\\username<\/strong>. The Firebox matches the DOMAIN<\/strong> part with the RADIUS server name. If the names don\u2019t match (for example, lowercase or different spelling), authentication fails.<\/p>\n\n\n\n

Windows VPN Client Configuration<\/strong><\/p>\n\n\n\n

    \n
  1. Open VPN Settings<\/strong>\n
      \n
    • Go to Settings \u2192 Network & Internet \u2192 VPN<\/strong>.<\/li>\n\n\n\n
    • Select your IKEv2 VPN profile.<\/li>\n\n\n\n
    • Click Advanced options \u2192 More VPN properties \u2192 Edit<\/strong>.<\/li>\n<\/ul>\n<\/li>\n\n\n\n
    • Enable Automatic Logon<\/strong>\n
        \n
      • Under Security \u2192 Authentication Properties<\/strong>, check \u201cAutomatically use my Windows log-on name and password (and domain if any)\u201d<\/strong>.<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n\n\n\n
        \"\"\n\t\t\t\n\t\t\t\t\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n\n\n\n
        <\/div>\n\n\n\n

        Firebox Configuration<\/strong><\/p>\n\n\n\n

          \n
        1. RADIUS Server Setup<\/strong>\n
            \n
          • In Authentication Servers \u2192 RADIUS<\/strong>, set the RADIUS name<\/strong> to match your on-prem AD NetBIOS domain name<\/strong> \u2014 in CAPITAL letters<\/strong>. Example:\n
              \n
            • AD domain: kita.local<\/li>\n\n\n\n
            • NetBIOS name: KITA<\/li>\n\n\n\n
            • Firebox RADIUS name: KITA<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/li>\n\n\n\n
            • Add RADIUS to IKEv2 Authentication<\/strong>\n
                \n
              • In VPN \u2192 Mobile VPN with IKEv2 \u2192 Authentication<\/strong>, add the RADIUS server you just configured.<\/li>\n\n\n\n
              • It doesn\u2019t need to be the default authentication server \u2014 just listed.<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n\n\n\n
                \"\"\n\t\t\t\n\t\t\t\t\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n\n\n\n
                <\/div>\n\n\n\n
                \"\"\n\t\t\t\n\t\t\t\t\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n","protected":false},"excerpt":{"rendered":"

                When the Windows IKEv2 VPN client uses automatic logon, it sends credentials as DOMAIN\\username. The Firebox matches the DOMAIN part with the RADIUS server name. If the names don\u2019t match (for example, lowercase or different spelling), authentication fails. Windows VPN Client Configuration Firebox Configuration<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[13,5,12,4,2],"tags":[],"class_list":["post-336","post","type-post","status-publish","format-standard","hentry","category-authentication","category-ikev2","category-radius","category-vpn","category-watchguard"],"_links":{"self":[{"href":"https:\/\/mangen.kitabara.org\/index.php\/wp-json\/wp\/v2\/posts\/336","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mangen.kitabara.org\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mangen.kitabara.org\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mangen.kitabara.org\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/mangen.kitabara.org\/index.php\/wp-json\/wp\/v2\/comments?post=336"}],"version-history":[{"count":5,"href":"https:\/\/mangen.kitabara.org\/index.php\/wp-json\/wp\/v2\/posts\/336\/revisions"}],"predecessor-version":[{"id":342,"href":"https:\/\/mangen.kitabara.org\/index.php\/wp-json\/wp\/v2\/posts\/336\/revisions\/342"}],"wp:attachment":[{"href":"https:\/\/mangen.kitabara.org\/index.php\/wp-json\/wp\/v2\/media?parent=336"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mangen.kitabara.org\/index.php\/wp-json\/wp\/v2\/categories?post=336"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mangen.kitabara.org\/index.php\/wp-json\/wp\/v2\/tags?post=336"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}