Connecting to L2TP/IPsec from Android

Configuration guides, troubleshooting and practical advice for AZTCOFW.

Articles

4 results

Android Client Setup

On the phone/tablet/device: Go to the system settings and VPN settings (varies by device and specific Android version Tap Add VPN Profile Enter a name For Type , tap L2TP/IPsec PSK Server Address : The WAN IP of the AZTC

IPsec Setup

The setup is similar to a standard IPsec Remote Access VPN Example Using IKEv1 with Xauth setup except that xauth is not used, but rather “ Mutual PSK ”, and Phase 2 uses Transport mode rather than Tunnel. Pre-Shared Key

L2TP Setup

To setup L2TP navigate to VPN > L2TP Select Enable L2TP Server Interface is WAN (or the same chosen for IPsec) Server Address is an unused IP address in a new subnet. It MUST NOT overlap any IP in use on the firewall, e.

Other Thoughts

In theory, Mutual RSA should also work, but so far it has not succeeded in testing. In RSA mode, Phase 1 requires main mode, but otherwise should be OK.