Android VPN Client IP-SEC IKEv2 supported at ER707-M2 ???
Dear all,
looking for a new router with support of Android VPN Client. I have several phones / tabs e.g. S20,S22, tab A8 what need to connect via VPN to my network.
SInce Android has no longer support for IKEv1 the list of routers are short.
Will the new TP ER707-M2 work with this scenaro ???
Is there any usecase known, or can the tech. support give me an answer if this works??
thanks in advance
BR
nuts
- Copy Link
- Subscribe
- Bookmark
- Report Inappropriate Content
Hi @NutsB22
Thanks for posting in our business forum.
This might be the reason why you cannot join the IPsec. If your WAN is not a public IP on the Omada router, it won't connect. iOS definitely can. Android does not because it does not support changing the Local ID type.
You must have used port forward or DMZ in your network, right? A double-NAT situation.
In that FAQ you followed, it writes:
2) Since IKEv2 for Android cannot edit Local ID Type, only IP address can be used. So it is required that there must be no NAT device on the front of Omada router, which means the WAN IP address of Omada router must be a public IP address for the client to be able to connect successfully.
https://community.tp-link.com/en/business/forum/topic/643176?replyId=1286332
- Copy Link
- Report Inappropriate Content
- Copy Link
- Report Inappropriate Content
are you sure? it is not simply this option! Have you did this config already?
I tried to connect android to a ER7212PC already using this article: https://www.tp-link.com/de/support/faq/3447/
And what a surprise it doesn't work. It seems the ER7212PC was not supporting the right proposals sha2.....
Here from the FAQ 2022 :
NOTE :
1) Since each phone supports different proposals, we only list some common proposal combinations here. If the above four combinations cannot be successfully connected, please contact Tp-Link technical support. Some of the Android models support sha2 at least, currently only ER8411 and ER605 v2 support sha2 and dh14 or above, ER605v1 and ER7206 will be supported in subsequent firmware updates.
2) Since IKEv2 for Android cannot edit Local ID Type, only IP address can be used. So it is required that there must be no NAT device on the front of the Omada router, which means the WAN IP address of the Omada router must be a public IP address for the client to be able to connect successfully.
=> My router will get the WAN IP via DHCP directly, so point 2 match.
But i need confirmation the new ER707-M2 support right IPSEC/IKEv2 and proposals to establish the VPN from Android.
Before I buy a second TP-link router i what to make this sure before wasting my time and money again!!!
- Copy Link
- Report Inappropriate Content
- Copy Link
- Report Inappropriate Content
that's good to know. It's seems the ER707-M2 meet requirements of Android so far we know...!!
I bought the ER7212PC about 3 weeks ago because this router have IKEv2 and this was needed for new Android VPNs.
In the next step i learn that sha2 was also a necessary option.... mmh what next !?!?
The reason i open this topic was the clear question if any user or support tech was able to establish a Android 13 VPN connection with the new ER707-M2.
This use case is a challenge since Android 12? came out and not longer support IKEv1.
- Copy Link
- Report Inappropriate Content
are you seeking confirmation? at least 605 and 7206 can do that.
about the 7212pc, I don't recommend any users who seek the most recent features get this model. it's more like a model made for real business. a very small network for restaurants. not suitable for any home users who want more and more features. it lags in the update if you check it.
anyway, the end of the buying things, will end up with a home server. at least I do. home server with router-dns-vpn-nas.
- Copy Link
- Report Inappropriate Content
the ER605 and ER7206 are a bit smaller and older routers. TP-link VPN article is from last year also....
We can stop talk about the ER7212PC ... i made my experiance ;-) it's enough....
ER707-M2 is a new player and very interessting for us people. More and better ports, faster cpu and so on.
If Android 13 VPN is supported, this router is my first choice at all!
- Copy Link
- Report Inappropriate Content
@NutsB22
you're right. you can always check the firmware release first before you make a purchase. you can expect more features on there stuff as you can see there are many features added this year and it's becoming full-feathered.
- Copy Link
- Report Inappropriate Content
then..... the main question to tp-link support is still open.
Can give any support member an answer if ER707-M2 works with Android 13 VPN ???
Would be happy to place an order for this product :-)
- Copy Link
- Report Inappropriate Content
I think, that an option will be OpenVPN. I am using IT on ER605 V1, but it will be slower, than IKEv2 VPN. Hope that some owner will confirm IKEv2 on android with ER707-M2.
- Copy Link
- Report Inappropriate Content
Hi @NutsB22
Thanks for posting in our business forum.
After confirming with the team, it supports after the firmware release ER707-M2(UN)_V1_1.1.0 Build 20230609. You can refer to the guide of How to connect to Omada Router using IKEv2 VPN of Android/iOS
- Copy Link
- Report Inappropriate Content
Information
Helpful: 0
Views: 3194
Replies: 26
Voters 0
No one has voted for it yet.