From f558f26520e0f9353956c884e04c10a5b56ffed3 Mon Sep 17 00:00:00 2001 From: hwdsl2 Date: Mon, 7 Nov 2022 23:20:01 -0600 Subject: [PATCH] Update docs - Add a troubleshooting section for IKEv2 "parameter is incorrect" error. - Fixes #1268. See also #873. --- docs/ikev2-howto-zh.md | 5 +++++ docs/ikev2-howto.md | 5 +++++ 2 files changed, 10 insertions(+) diff --git a/docs/ikev2-howto-zh.md b/docs/ikev2-howto-zh.md index 293f102..6c06aef 100644 --- a/docs/ikev2-howto-zh.md +++ b/docs/ikev2-howto-zh.md @@ -548,6 +548,7 @@ sudo chmod 600 ca.cer client.cer client.key * [无法连接多个 IKEv2 客户端](#无法连接多个-ikev2-客户端) * [IKE 身份验证凭证不可接受](#ike-身份验证凭证不可接受) * [参数错误 policy match error](#参数错误-policy-match-error) +* [参数错误 parameter is incorrect](#参数错误-parameter-is-incorrect) * [连接 IKEv2 后不能打开网站](#连接-ikev2-后不能打开网站) * [Windows 10 正在连接](#windows-10-正在连接) * [其它已知问题](#其它已知问题) @@ -582,6 +583,10 @@ sudo ikev2.sh --addclient [client name] REG ADD HKLM\SYSTEM\CurrentControlSet\Services\RasMan\Parameters /v NegotiateDH2048_AES256 /t REG_DWORD /d 0x1 /f ``` +### 参数错误 parameter is incorrect + +如果你在尝试使用 IKEv2 模式连接时遇到 "错误 87：参数错误 The parameter is incorrect"，请尝试 [这个 Issue](https://github.com/trailofbits/algo/issues/1051) 中的解决方案，更具体地说，第 2 步 "reset device manager adapters"。 + ### 连接 IKEv2 后不能打开网站 如果你的 VPN 客户端设备在成功连接到 IKEv2 后无法打开网站，请尝试以下解决方案： diff --git a/docs/ikev2-howto.md b/docs/ikev2-howto.md index e1f2208..1190bbe 100644 --- a/docs/ikev2-howto.md +++ b/docs/ikev2-howto.md @@ -550,6 +550,7 @@ for the entire network, or use `192.168.0.10` for just one device, and so on. * [Unable to connect multiple IKEv2 clients](#unable-to-connect-multiple-ikev2-clients) * [IKE authentication credentials are unacceptable](#ike-authentication-credentials-are-unacceptable) * [Policy match error](#policy-match-error) +* [Parameter is incorrect](#parameter-is-incorrect) * [Cannot open websites after connecting to IKEv2](#cannot-open-websites-after-connecting-to-ikev2) * [Windows 10 connecting](#windows-10-connecting) * [Other known issues](#other-known-issues) @@ -584,6 +585,10 @@ To fix this error, you will need to enable stronger ciphers for IKEv2 with a one REG ADD HKLM\SYSTEM\CurrentControlSet\Services\RasMan\Parameters /v NegotiateDH2048_AES256 /t REG_DWORD /d 0x1 /f ``` +### Parameter is incorrect + +If you encounter "Error 87: The parameter is incorrect" when trying to connect using IKEv2 mode, try the solutions in [this issue](https://github.com/trailofbits/algo/issues/1051), more specifically, step 2 "reset device manager adapters". + ### Cannot open websites after connecting to IKEv2 If your VPN client device cannot open websites after successfully connecting to IKEv2, try the following fixes: