masuk ke menu ip -> ipsec -> mode configs
klik + (new)
name dirubah -> vpn-ipsec-ikev
address pool dirubah ke -> pool-vpn-ipsec
address prefix length dirubah -> 32
system dns -> di unchek karena kita akan menggunakan dns handpone
klik -> apply kemudian -> ok
masuk ke tab -> proposals
name dirubah -> ipsec-kev2
auth algorithms -> ceklist -> sha1 & sha256 ( selain ini unchek )
encr algorithms -> ceklist -> aes-256 cbc ( selain ini unchek )
PFS Group -> none
klik -> apply kemudian -> ok
masuk ke menu -> Groups
klik + (new)
name dirubah -> ipsec-ikev2
klik -> apply kemudian -> ok
masuk ke menu -> profiles
name dirubah -> ipsec-ikev
Hash Algorithms -> sha256
PRF
Algorithms -> auto
Encryption Algorithms -> ceklis -> aes-256 ( selain ini unchek )
DH Group -> ceklist -> modp1024 & modp2048 ( selain ini unchek )
Proposal Check -> obey
lifetome -> 1d 00:00:00
lifebytes -> blank
NAT -> cheklis
DPD interval : 120
DPD Maximum Failures -> 5
klik -> apply kemudian -> ok
masuk ke menu -> Policies
klik + (new)
tab -> general
Template -> cheklis
Group -> ipsec-ikev2
tab -> Action
action -> encrypt
ipsec protocols -> esp
proposal -> ipsec-ikev2
klik -> apply kemudian -> ok
masuk ke menu -> Peers
klik + (new)
name -> vpn-ikev2
address -> :/0
port -> blank
local Address -> blank
profile -> ipsec-ikev
Exchange Mode -> IKE2
Passive -> ceklis
Send INITIAL_CONTACT -> ceklis
klik -> apply kemudian -> ok
masuk ke menu -> Identities
klik + (new)
peer -> vpn-ikev2
auth method -> pre shared key
secret -> prabagi@2025!!
Police Template Group -> ipsec-ikev2
notrack chain -> kosong
My ID Type -> auto
Remote ID type -> auto
Match By -> remote id
mode configuration -> vpn-ipsec-ikev
Generate Policy -> port strict
klik -> apply kemudian -> ok
--------------------->
konfigurasi vpn smartpone
menu vpn -> tambah
jenis -> IKEv2/IPsec-PSK
alamat server -> 202.xxx.xxx.51 --> sesuaikan ip public server vpn
pengenal ipsec -> ipsec
kunci pra-bagi IPsec -> isikan password (prabagi@2025!!)
--------------------->
Sudah dicoba menggunakan MikroTik RB3011UiAS dan berhasil.