UWP调用Vpn AddProfileFromObjectAsync始终返回"other"错误求助

针对调用AddProfileFromObjectAsync始终返回Other状态的问题，结合系统手动创建可正常工作的对比，以下是几个关键修复点：

1. 确保应用声明VPN权限 #

UWP应用必须在Package.appxmanifest中声明VPN功能，否则所有VPN API调用都会静默失败：

<Capabilities>
    <Capability Name="internetClient" />
    <Capability Name="vpn" />
</Capabilities>

2. 补充EAP配置细节 #

你只指定了使用EAP认证，但未提供具体的EAP配置参数。系统设置创建时会自动填充默认EAP配置（比如EAP-MSCHAPv2），代码中必须显式添加：

private string CreateEapMschapv2Config()
{
    // 生成EAP-MSCHAPv2的标准XML配置
    return @"<?xml version=""1.0"" encoding=""UTF-8""?>
<EapHostConfig xmlns=""http://www.microsoft.com/provisioning/EapHostConfig"">
    <EapMethod>
        <Type xmlns=""http://www.microsoft.com/provisioning/EapCommon"">26</Type>
        <VendorId xmlns=""http://www.microsoft.com/provisioning/EapCommon"">0</VendorId>
        <VendorType xmlns=""http://www.microsoft.com/provisioning/EapCommon"">0</VendorType>
        <AuthorId xmlns=""http://www.microsoft.com/provisioning/EapCommon"">0</AuthorId>
    </EapMethod>
    <Config xmlns=""http://www.microsoft.com/provisioning/EapHostConfig"">
        <Eap xmlns=""http://www.microsoft.com/provisioning/BaseEapConnectionPropertiesV1"">
            <Type>26</Type>
            <EapType xmlns=""http://www.microsoft.com/provisioning/MsPeapConnectionPropertiesV1"">
                <ServerValidation>
                    <DisableUserPromptForServerValidation>false</DisableUserPromptForServerValidation>
                    <ServerNames></ServerNames>
                </ServerValidation>
                <FastReconnect>true</FastReconnect>
                <InnerEapOptional>false</InnerEapOptional>
                <Eap xmlns=""http://www.microsoft.com/provisioning/BaseEapConnectionPropertiesV1"">
                    <Type>25</Type>
                    <EapType xmlns=""http://www.microsoft.com/provisioning/MsChapV2ConnectionPropertiesV1"">
                        <UseWinLogonCredentials>false</UseWinLogonCredentials>
                    </EapType>
                </Eap>
                <EnableQuarantineChecks>false</EnableQuarantineChecks>
                <RequireCryptoBinding>false</RequireCryptoBinding>
                <PeapExtensions>
                    <PerformServerValidation xmlns=""http://www.microsoft.com/provisioning/MsPeapConnectionPropertiesV2"">false</PerformServerValidation>
                    <AcceptServerName xmlns=""http://www.microsoft.com/provisioning/MsPeapConnectionPropertiesV2"">false</AcceptServerName>
                </PeapExtensions>
            </EapType>
        </Eap>
    </Config>
</EapHostConfig>";
}

然后在创建profile时添加：

connectionProfile.EapConfiguration = CreateEapMschapv2Config();

3. 关联凭据到VPN配置 #

你创建了PasswordCredential但未关联到profile，导致凭据未被写入配置：

connectionProfile.StorageCredential = credential;

4. 避免异步方法使用async void #

将async void改为async Task，并添加异常捕获，获取更详细的错误信息：

public async Task ConnectAsync()
{
    try
    {
        var connectionProfile = new VpnNativeProfile
        {
            AlwaysOn = true,
            NativeProtocolType = VpnNativeProtocolType.IpsecIkev2,
            ProfileName = "TestProfile",
            RememberCredentials = true,
            RequireVpnClientAppUI = true,
            RoutingPolicyType = VpnRoutingPolicyType.ForceAllTrafficOverVpn,
            UserAuthenticationMethod = VpnAuthenticationMethod.Eap,
            TunnelAuthenticationMethod = VpnAuthenticationMethod.Eap,
            EapConfiguration = CreateEapMschapv2Config()
        };

        connectionProfile.Servers.Add("192.168.1.123");

        var credential = new PasswordCredential
        {
            UserName = "test",
            Password = "test123"
        };
        connectionProfile.StorageCredential = credential;

        var status = await Windows.Networking.Vpn.VpnManager.GetDefault().AddProfileFromObjectAsync(connectionProfile);

        Debug.Print($"Connection status -> {status}");
    }
    catch (Exception ex)
    {
        Debug.Print($"Error: {ex.Message}");
    }
}

5. 检查配置文件名称是否重复 #

如果系统中已存在同名的"TestProfile" VPN配置，会导致添加失败，建议先删除旧配置或使用唯一名称测试。

内容的提问来源于stack exchange，提问作者Leyter