Community discussions

MikroTik App
 
madox
newbie
Topic Author
Posts: 28
Joined: Fri Jan 02, 2015 12:52 pm

Ipsec with android

Sat Sep 29, 2018 12:54 pm

Hello everybody!
I have created my ipsec following this link...https://youtu.be/QlkIbx0Jpoo
With my laptop and ccr everything is ok, but i can' connect my mobile phone...have tried several programs from googleplay but nothing seems to work...
Software suggestin?
 
pe1chl
Forum Guru
Forum Guru
Posts: 10240
Joined: Mon Jun 08, 2015 12:09 pm

Re: Ipsec with android

Sat Sep 29, 2018 1:34 pm

I am not going to view a 1-hour video to see what you possibly did. Show a /export of your configuration instead.
But here is a hint: when you changed encryption to "modern" things like SHA256 and AES256, undo that. It won't work with Android.
Use the default settings using SHA1 and AES128.
 
sindy
Forum Guru
Forum Guru
Posts: 10206
Joined: Mon Dec 04, 2017 9:19 pm

Re: Ipsec with android

Sat Sep 29, 2018 1:40 pm

To refer to an hour-long video dealing with IPsec in general is not the best way of describing your particular configuration; following the suggestion in my automatic signature gives you a better chance for a useful response.

Android's embedded VPN client offers an IPsec/PSK mode, which uses IKEv1 main mode, so no need to download anything if you can live with IKEv1. Strongswan for Android offers several IKEv2 modes but not a PSK one, so you would need to deal with certificates as EAP is currently out of question.
 
User avatar
nichky
Forum Guru
Forum Guru
Posts: 1281
Joined: Tue Jun 23, 2015 2:35 pm

Re: Ipsec with android

Sat Sep 29, 2018 3:17 pm

I had same issues.
Play like that:

- Policy Proposal:
Auth. Algoritms: sha1,sha256
Encr. Algoritms: aes-256 cbc

- Peer Profile
Hash Algorihms: sha1
Enccryption Algorithm: aes-256

btw i'm using v6.43.2
 
pe1chl
Forum Guru
Forum Guru
Posts: 10240
Joined: Mon Jun 08, 2015 12:09 pm

Re: Ipsec with android

Sat Sep 29, 2018 5:59 pm

In my config I have both aes-128 and aes-256 encr. algorithm but it is certainly required to have sha1 in the peer profile
as written above, else it is definitely not going to work.
 
madox
newbie
Topic Author
Posts: 28
Joined: Fri Jan 02, 2015 12:52 pm

Re: Ipsec with android

Sat Sep 29, 2018 11:43 pm

Thx for your answers...

I will try with default android software and the above stated settings...

Who is online

Users browsing this forum: Amaan and 156 guests