How to set up VPN for android users?

I have need to set up VPN access for users, mostly Android clients to provide securty for accessing local SIP server using soft phones.

In old times it was easy to set up using PPTP, later it got bit complicated but stil manageable using L2TP, but now Android phones offer only IPSEC connections for VPN.

I’ve spent lot of time looking for suplution buit and I am pretty lost.

What I need is VPN that is:

a) simple to set up for user, especialy those that are not networking gurus

b) allows router to identify each percon logged in and assign predefined IP

c) set DNS on client to use local DNS for resolving addresses

I failed fo find proper solution. All I can find matches requirements of tunneling between networks than having plain ignorant living person with Android phone or PC at one end.

Is there any?

The most user-friendly VPN and easiest to set up would be probably Wireguard:

Wiregard is not even close to simple, not on the level of ordinary people.

Second this. I understand that the built-in ipsec seems the simplest, but there are many stories of endless struggles with the built-in implementations and their various (and changing) requirements.

For wireguard you have to install an app. But the app is actually lightweight and works well. Enrollment is usually done simply by scanning a qr code. Once that’s done, it’s stable and works fine.

Is there some tutorial that explains that simple method? All I can find requires back and forth manual exchange of keys between client and server to set up new user account

Here is a good tutorial about setting up Wireguard:

https://youtu.be/WoLzhQVuRU0?si=IALqH4WGdKSHewm6

At minute 19:46 you could see there is a scannable QR code that is generated for a peer

1 Like

Thank you! This way is indeed much simpler for end user than any other tutorial I found so far.
This should be in Mikrotik docs.

Well getting QR code is adventure for itself but at least having configuration is simpler :slight_smile: