Community discussions

MikroTik App
 
213
just joined
Topic Author
Posts: 1
Joined: Mon Aug 15, 2022 7:44 pm

Android 12 on Pixel 4a vs IKEv2/IPSec RSA

Tue Aug 16, 2022 4:12 pm

Hi,

I am trying VPN IKEv2/IPSec RSA on Pixel 4a (pure android) vs Mikrotik ROS7.4.1. I cant establish connection with this error:


18:47:15 ipsec payload seen: ID_I
18:47:15 ipsec payload seen: ID_R
18:47:15 ipsec payload seen: CERT
18:47:15 ipsec payload seen: AUTH
18:47:15 ipsec payload seen: SA
18:47:15 ipsec payload seen: TS_I
18:47:15 ipsec payload seen: TS_R
18:47:15 ipsec payload seen: CONFIG
18:47:15 ipsec processing payloads: NOTIFY (none found)
18:47:15 ipsec ike auth: respond
18:47:15 ipsec processing payload: ID_I
18:47:15 ipsec ID_I (FQDN): john
18:47:15 ipsec processing payload: ID_R
18:47:15 ipsec ID_R (FQDN): vpn.myserver.org
18:47:15 ipsec processing payload: AUTH
18:47:15 ipsec auth method not supported: 14
18:47:15 ipsec reply notify: AUTHENTICATION_FAILED
18:47:15 ipsec adding notify: AUTHENTICATION_FAILED

The same configuration is working on windows and also at iphone.

Does anybody know how to fix this?

Thanks.
 
sindy
Forum Guru
Forum Guru
Posts: 10205
Joined: Mon Dec 04, 2017 9:19 pm

Re: Android 12 on Pixel 4a vs IKEv2/IPSec RSA

Wed Aug 17, 2022 12:04 pm

18:47:15 ipsec processing payload: AUTH
18:47:15 ipsec auth method not supported: 14
The IANA IKEv2 parameter assignment table states that authentication type 14 is another type of digital signature (certificate) authentication, specified in RFC 7427, which is different from the five digital signature authentication types 1,3,9,10,11. So the error above suggests that Android 12 uses this new method of certificate authentication, and Mikrotik doesn't support it yet. Hence unless you can select which method to use on the Android, you have to either open a support ticket with Mikrotik (and wait for weeks or months for it to get implemented), or install Strongswan on your Android phone.

Who is online

Users browsing this forum: jamesperks, popecix, xristostsilis and 77 guests