Android 12 and ikev2
All Replies
-
Hi @DavideV,
This issue is fixed in V5.31 firmware. Please update to V5.31 and try it again.
V5.31 release note:
9. [ENHANCEMENT] eITS#180900304, 180801037
a.Support VPN multiple Diffie Hellman groups.1 -
Up!
@Zyxel_Cooldia referring to this...
https://community.zyxel.com/en/discussion/14436/firewall-usg110-with-vpn-connection-via-ikev2-is-not-working-both-on-preshared-key-or-cerfiticate#latest
WK35 firmware has the issue fixed?
If not, 4.x firmware will have the issue fixed?0 -
Hi @mMontana,
The issue is fixed in WK35. Lab test on Google Pixel 5 Android 13, and Xiaomi poco F3 Android 12.
Both mobile phone can build up IKEv2 + PSK tunnel successfully. We may need to check if the issue is something related to specific brand mobile phone.0 -
Thanks for your kind reply.
0 -
Just found out that, if we test on Samsung mobile phone IKEv2 + PSK Remote access VPN, we cannot just provide 1 DNS server in phase 2 mode config. Mobile will send "DEL" message to gateway immediately when the tunnel is up assume we just set up 1 DNS server for mode config.
That's weird. other brand mobile can accept one DNS server in mode config.
Not sure if it is limitation on specific version.
Condition :
Samsung Android 12 + IKEv2 + PSK
Mode config: Need to set up 2 DNS server for Samsung mobile in phase 2 mode config
0 -
Hint for @Zyxel_Cooldia: update the manuals and the howtos published.0
-
Dear Zyxel team,
Now that Android 13 has rolled out onto Samsung phones, and L2TP has practically stopped working on them, I was wondering if you guys have a plan to overcome this situation, as Samsung apparently still uses a weird hashing algorithm, that we cannot set in the Zyxel firewalls if trying to move towards IKEv2.
Whatever I tried wouldn't let me past Phase 1.
This guide here unfortunately doesn't work for these phones, you may consider putting there a note, that Samsung phones are an exception.
Any chance we can get back our VPNs soon? :-)
0 -
-
Zyxel_Cooldia said:0
-
I actually succeeded setting it up, but it might not be trivial for others0
Categories
- All Categories
- 190 Beta Program
- 1.7K Nebula
- 92 Nebula Ideas
- 63 Nebula Status and Incidents
- 4.7K Security
- 236 Security Ideas
- 1.1K Switch
- 51 Switch Ideas
- 919 WirelessLAN
- 28 WLAN Ideas
- 5.4K Consumer Product
- 173 Service & License
- 296 News and Release
- 65 Security Advisories
- 14 Education Center
- 1K FAQ
- 453 Nebula FAQ
- 258 Security FAQ
- 100 Switch FAQ
- 115 WirelessLAN FAQ
- 22 Consumer Product FAQ
- 67 Service & License FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 69 About Community
- 52 Security Highlight