I had a IKEv2 VPN connection configured with MacOS Mojave that worked perfectly.

After updating to Catalina I can't connect to the VPN with the message User authentication failed.

Any idea how to fix or troubleshoot this problem?

The only logs I've found are in /var/system/wifi.log:

Wed Oct  9 23:47:06.462 <airportd[300]> _processIPv4Changes: ARP/NDP offloads disabled, not programming the offload

I had the same problem and I fixed with changing "Authentication Settings" from "Certificate" to "None". After this change, you will see 2 new options appeared just below, "Shared Secret" and "Certificate". Select "Certificate" option and reselect the certificate that is already used for the VPN connection before. Then click Connect button, confirm applying changes and viola!

  • Hi erkan, thanks for answering. The point is I'm using username authentication method (user password) so that wouldn't work for me. – codependent Oct 9 at 20:30
  • This does work for client based authentication, but I wonder what the implications of using "None" for authentication with the certificate suboption are. – Swiss Oct 11 at 21:46

Make sure you comply with the current "MUST" settings in this RFC for the IPSec/VPN-server:

RFC 8221 - Cryptographic Algorithm ... - IETF Tools

In my case we experienced disconnects after 480 seconds.

Found out that the proposal for "AES_CBC_256/HMAC_SHA2_256_128" was missing in the VPN-server. With AES-256/SHA-256 enabled the VPN-connection stays connected.

More info:

VPN enhancements in iOS 13 and macOS Catalina

New contributor
kablage is a new contributor to this site. Take care in asking for clarification, commenting, and answering. Check out our Code of Conduct.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .