Always On VPN IKEv2 Enable SSTP Fallback and device tunnel

Question

Hello,

We are using IKEv2 with user tunnel and woule like to enable Device tunnel and SSTP Fallback.
Is there any guide we can follow?

Answer 1

Hi ,

The following article talking about Always On VPN IKEv2 and SSTP Fallback, you could have a look:

Setting the VpnStrategy to 8 or 14 will force the client to attempt an IKEv2 connection first. However, this setting is dynamically updated by Windows and is subject to change. For example, if an IKEv2 connection fails and SSTP is successful, Windows will then set the VpnStrategy to 6 and all subsequent VPN connection attempts will use SSTP first. Because of this it will be necessary to update the VpnStrategy setting each time prior to establishing a VPN connection.

Always On VPN IKEv2 and SSTP Fallback

For how to configure Device Tunnel Step-by-Step using powershell, you could refer to the following article:

Always On VPN Windows 10 Device Tunnel Step-by-Step Configuration using PowerShell

Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.

Best Regards,

Candy

--------------------------------------------------------------

If the Answer is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

Hello Hanna, did you manage to set up the SSTP fallback with the Device Tunnel?
If yes, could you share your ProfileXML configuration with me?

(Just reposting this on the answers for visibility)