Project

General

Profile

BlackBerry OS 10

Blackberry 10 supports Cisco IKEv1 with XAUTH-PSK and XAUTH-PKI and IKEv2 with PSK, PKI, EAP-TLS and EAP-MSCHAPv2 authentication. You should choose "Generic IKEv2 VPN Server" as a gateway type for IKEv2. IPv6 is not supported.
Both server and client could be authenticated by IPv4 address, FQDN, Email in certificate, General or Distinguished name.

For BlackBerry OS 10 to accept a server certificate, it has to contain the serverAuth flag in the EKU (Extended Key Usage) field.
A client certificate needs to have clientAuth set in the EKU field.

The ikev2-eap-mschapv2 configuration from the sane examples page is compatible with Blackberry OS.