Android 12 and ikev2

Agor76

DavideV said:

Hello everybody,

guys i have the same s22 ultra with the same problem.

I was about to buy the USG20-VPN mod but after reading this thread I stopped. 

So I ask you for an update on the situation. Is it possible to set ikev2 psk directly in android vpn section? 

I ask it because I would have bixby routinely manage the activation and deactivation of the vpn depending on whether or not it is under the same Wifi. And above all, avoid using third-party applications because they consume a train of battery. Thank you

Hello DavideV,

So far, I didn't manage to get the S22 Ultra's VPN built in client working. It works flawless using Strongswan app as I wrote several time on here. But I had a chance to try an updated Google Pixel phone and it works. Using same settings, same parameters Google Pixel works fine, S22 doesn't ! So, according to my opinion, it shouldn't be a zyxel related issue.
Not sure if strongswan vpn get along with Bixby

Agor

DavideV

hi and thanks for the support.

In practice they are in canvas pants if you are unable to enter the parameters in the s22 and actually bixby cannot activate / deactivate the tunnel from an app.
But does ikev2 PSK also have problems?
Could you tell me maybe with a screenshot what mistake it makes?
So I post it on the samsung community. Thank you

Peppino

So is there any conclusion for IKEv2, my S21 phone wouldn't connect too. L2TP works just fine.

PeterUK

Peppino said:

So is there any conclusion for IKEv2, my S21 phone wouldn't connect too. L2TP works just fine.

You may need to play around with the Key group and encryption
VPN Server role IKEv2 broken as far as I can tell — Zyxel Community

Peppino

PeterUK said:

Peppino said:

So is there any conclusion for IKEv2, my S21 phone wouldn't connect too. L2TP works just fine.

You may need to play around with the Key group and encryption
VPN Server role IKEv2 broken as far as I can tell — Zyxel Community

Tried these, but still doesn't work.

PeterUK

Set for VPN gateway domain name / Ipv4 to 0.0.0.0

in VPN connection set loacl poilcy with host IP 0.0.0.0

check Related Settings zone is IPSec_VPN

Zyxel_Cooldia

Hi @Peppino,
Samsung uses DH24 by default but our device only supports up to DH21. DH24 is less secure than DH21. It is not recommended option. Please install Strongswan APP on S21.

mMontana

https://play.google.com/store/apps/details?id=org.strongswan.android

StrongSwan Android from StrongSwan Project

https://docs.strongswan.org/docs/5.9/os/androidVpnClient.html

Documentation about Android VPN client

Peppino

Zyxel_Cooldia said:

Hi @Peppino,
Samsung uses DH24 by default but our device only supports up to DH21. DH24 is less secure than DH21. It is not recommended option. Please install Strongswan APP on S21.

Thank you Cooldia,

This makes things clearer, appreciate your answer.

DavideV

Hello Cooldia and thanks for the explanation.

In fact, it was days that I kept beating my head trying to configure an s22 ultra with a USG20-VPN and in any case I have not succeeded. But now at least I know why.

Do you think it will be possible to implement DH24 on your devices in the future? Thanks