IKEv2 VPN not working on Android 14 to ER605v2 (Galaxy S24 Ultra)

IKEv2 VPN not working on Android 14 to ER605v2 (Galaxy S24 Ultra)

IKEv2 VPN not working on Android 14 to ER605v2 (Galaxy S24 Ultra)
IKEv2 VPN not working on Android 14 to ER605v2 (Galaxy S24 Ultra)
2024-04-14 17:02:20 - last edited 2024-05-30 17:13:18
Model: ER605 (TL-R605)  
Hardware Version: V2
Firmware Version: 2.2.4

Hello all!

 

I have an ER605v2 running alongside an OC200 controller. I've previously tried to setup an IKEv2 VPN server to access my network from the internet using a flagship android device before I got the OC200, and if I remember correctly I had success. 

 

After getting the OC200, and now using a Galaxy S24 Ultra, I cannot get the server to work. Things to consider:

 

  • ER605 is NOT double NATted, the modem from the ISP is configured in Bridged Mode and the router has it's own public IP address. 
  • I've tried many, many proposal settings and I don't think that's the problem

 

Using the app "strongSwan" to connect, I get the following LOG:

 

 

[edited to remove info]

 

Any idea what can be causing the problem?

 

Couldn't get a Windows computer to connect either, no matter what proposals I select.

 

Thanks!

  0      
  0      
#1
Options
2 Accepted Solutions
Re:IKEv2 VPN not working on Android 14 to ER605v2 (Galaxy S24 Ultra)-Solution
2024-04-16 02:44:41 - last edited 2024-04-19 01:57:48

Hi @Hambert 

Thanks for posting in our business forum.

Hambert wrote

  @Clive_A I sincerely thank you so much for your help.

 

During testing I tried both using WiFi and cellular. Results are similar.

 

Yes, the VPN server is at work alongside with the OC200 controller and Omada network. I'm doing all the testing from home, in another location. 

 

If you know more tests I can do or how to obtain more detailed logs please tell me and I'll try it.

 

Thank you very much again!

Humberto

 

Remove the Remote ID in the phase 1 and try again. Let me know the result.

Best Regards! If you are new to the forum, please read: Howto - A Guide to Use Forum Effectively. Read Before You Post. Look for a model? Search your model NOW Official and Beta firmware. NEW features! Subscribe for the latest update!Download Beta Here☚ ☛ ★ Configuration Guide ★ ☚ ☛ ★ Knowledge Base ★ ☚ ☛ ★ Troubleshooting Manual ★ ☚ (Disclaimer: Short links are used above solely for guidance to TP-Link subdomains and are safe and tracker-free. Exercise caution with short links from non-official members on forums. We are not liable for external content or damage from non-official members' link use.)
Recommended Solution
  0  
  0  
#6
Options
Re:IKEv2 VPN not working on Android 14 to ER605v2 (Galaxy S24 Ultra)-Solution
2024-04-16 15:04:04 - last edited 2024-04-19 01:58:13

  @Clive_A well, I got it to connect, but something seems very odd.

 

First of all I tried using IPv6 as my ISP supports it, but I couldn't get the server to respond (maybe IPv6 isn't supported on the VPN server yet?).

 

I changed Remote ID type on Phase 1 to "IP Adress".

 

- strongSwan won't let me connect without specifying an username, so I leave it as "123" but it still gives AUTH FAILED.

 

- On the integrated Android client I can leave the "IPSec identifier" field empty, but it would still not connect.

 

- ONLY if I fill in "123" on the identifier field, IT THEN CONNECTS! 

 

So the ONLY way I got it to connect is setting Remote ID type on Phase 1 to "IP Adress" and still filling "123" as identifier on the Android client settings. That doesn't make sense at all.

 

Something is wrong and needs to be addressed, either by TP-Link or by Google. I can't see people using IKEv2 if the config is this kind of nightmare, even for network engineers.

 

PD: Windows is still unable to connect.

 

Thanks!

Recommended Solution
  0  
  0  
#7
Options
9 Reply
Re:IKEv2 VPN not working on Android 14 to ER605v2 (Galaxy S24 Ultra)
2024-04-15 02:07:24 - last edited 2024-04-19 01:58:02

Hi @Hambert 

Thanks for posting in our business forum.
What's the cellphone config? Do you set the ID on it?

Please mosaic your sensitive information. Here is a list of information considered sensitive:

1. Public IP address on your WAN if your WAN is.

2. Real MAC address of your device.

3. Your personal information including address, domain name, and credentials.

For troubleshooting purposes, when a WAN IP is needed, please leave some values visible for identification.

Best Regards! If you are new to the forum, please read: Howto - A Guide to Use Forum Effectively. Read Before You Post. Look for a model? Search your model NOW Official and Beta firmware. NEW features! Subscribe for the latest update!Download Beta Here☚ ☛ ★ Configuration Guide ★ ☚ ☛ ★ Knowledge Base ★ ☚ ☛ ★ Troubleshooting Manual ★ ☚ (Disclaimer: Short links are used above solely for guidance to TP-Link subdomains and are safe and tracker-free. Exercise caution with short links from non-official members on forums. We are not liable for external content or damage from non-official members' link use.)
  0  
  0  
#2
Options
Re:IKEv2 VPN not working on Android 14 to ER605v2 (Galaxy S24 Ultra)
2024-04-15 03:12:40 - last edited 2024-05-30 17:12:54

Sure. Here's both the config in the integrated VPN client and the strongSwan app:

 

[edited to remove info]

 

  0  
  0  
#3
Options
Re:IKEv2 VPN not working on Android 14 to ER605v2 (Galaxy S24 Ultra)
2024-04-15 06:33:49

Hi @Hambert 

Thanks for posting in our business forum.

Hambert wrote

Sure. Here's both the config in the integrated VPN client and the strongSwan app:

 

 

 

Can you connect it via your LTE? Not the WIFI.

Are you still connected to your VPN server LAN(WIFI)?

Best Regards! If you are new to the forum, please read: Howto - A Guide to Use Forum Effectively. Read Before You Post. Look for a model? Search your model NOW Official and Beta firmware. NEW features! Subscribe for the latest update!Download Beta Here☚ ☛ ★ Configuration Guide ★ ☚ ☛ ★ Knowledge Base ★ ☚ ☛ ★ Troubleshooting Manual ★ ☚ (Disclaimer: Short links are used above solely for guidance to TP-Link subdomains and are safe and tracker-free. Exercise caution with short links from non-official members on forums. We are not liable for external content or damage from non-official members' link use.)
  1  
  1  
#4
Options
Re:IKEv2 VPN not working on Android 14 to ER605v2 (Galaxy S24 Ultra)
2024-04-15 10:00:08

  @Clive_A I sincerely thank you so much for your help.

 

During testing I tried both using WiFi and cellular. Results are similar.

 

Yes, the VPN server is at work alongside with the OC200 controller and Omada network. I'm doing all the testing from home, in another location. 

 

If you know more tests I can do or how to obtain more detailed logs please tell me and I'll try it.

 

Thank you very much again!

Humberto

 

  0  
  0  
#5
Options
Re:IKEv2 VPN not working on Android 14 to ER605v2 (Galaxy S24 Ultra)-Solution
2024-04-16 02:44:41 - last edited 2024-04-19 01:57:48

Hi @Hambert 

Thanks for posting in our business forum.

Hambert wrote

  @Clive_A I sincerely thank you so much for your help.

 

During testing I tried both using WiFi and cellular. Results are similar.

 

Yes, the VPN server is at work alongside with the OC200 controller and Omada network. I'm doing all the testing from home, in another location. 

 

If you know more tests I can do or how to obtain more detailed logs please tell me and I'll try it.

 

Thank you very much again!

Humberto

 

Remove the Remote ID in the phase 1 and try again. Let me know the result.

Best Regards! If you are new to the forum, please read: Howto - A Guide to Use Forum Effectively. Read Before You Post. Look for a model? Search your model NOW Official and Beta firmware. NEW features! Subscribe for the latest update!Download Beta Here☚ ☛ ★ Configuration Guide ★ ☚ ☛ ★ Knowledge Base ★ ☚ ☛ ★ Troubleshooting Manual ★ ☚ (Disclaimer: Short links are used above solely for guidance to TP-Link subdomains and are safe and tracker-free. Exercise caution with short links from non-official members on forums. We are not liable for external content or damage from non-official members' link use.)
Recommended Solution
  0  
  0  
#6
Options
Re:IKEv2 VPN not working on Android 14 to ER605v2 (Galaxy S24 Ultra)-Solution
2024-04-16 15:04:04 - last edited 2024-04-19 01:58:13

  @Clive_A well, I got it to connect, but something seems very odd.

 

First of all I tried using IPv6 as my ISP supports it, but I couldn't get the server to respond (maybe IPv6 isn't supported on the VPN server yet?).

 

I changed Remote ID type on Phase 1 to "IP Adress".

 

- strongSwan won't let me connect without specifying an username, so I leave it as "123" but it still gives AUTH FAILED.

 

- On the integrated Android client I can leave the "IPSec identifier" field empty, but it would still not connect.

 

- ONLY if I fill in "123" on the identifier field, IT THEN CONNECTS! 

 

So the ONLY way I got it to connect is setting Remote ID type on Phase 1 to "IP Adress" and still filling "123" as identifier on the Android client settings. That doesn't make sense at all.

 

Something is wrong and needs to be addressed, either by TP-Link or by Google. I can't see people using IKEv2 if the config is this kind of nightmare, even for network engineers.

 

PD: Windows is still unable to connect.

 

Thanks!

Recommended Solution
  0  
  0  
#7
Options
Re:IKEv2 VPN not working on Android 14 to ER605v2 (Galaxy S24 Ultra)
2024-04-18 01:47:42

Hi @Hambert 

Thanks for posting in our business forum.

Hambert wrote

  @Clive_A well, I got it to connect, but something seems very odd.

 

First of all I tried using IPv6 as my ISP supports it, but I couldn't get the server to respond (maybe IPv6 isn't supported on the VPN server yet?).

 

I changed Remote ID type on Phase 1 to "IP Adress".

 

- strongSwan won't let me connect without specifying an username, so I leave it as "123" but it still gives AUTH FAILED.

 

- On the integrated Android client I can leave the "IPSec identifier" field empty, but it would still not connect.

 

- ONLY if I fill in "123" on the identifier field, IT THEN CONNECTS! 

 

So the ONLY way I got it to connect is setting Remote ID type on Phase 1 to "IP Adress" and still filling "123" as identifier on the Android client settings. That doesn't make sense at all.

 

Something is wrong and needs to be addressed, either by TP-Link or by Google. I can't see people using IKEv2 if the config is this kind of nightmare, even for network engineers.

 

PD: Windows is still unable to connect.

 

Thanks!

Windows does not work with the IPsec yet. We don't support it.

About the Remote ID, I confirmed that Samsung would be different from the traditional Android system. Remote ID on the router is not needed which means the IPsec identifier on the Samsung is not needed. Use the IP address would fix it.

 

Can you try it again after a clean reboot after deleting the current IPsec? Set up the IPsec again and connect the cellphone and check if it can work okay.

Best Regards! If you are new to the forum, please read: Howto - A Guide to Use Forum Effectively. Read Before You Post. Look for a model? Search your model NOW Official and Beta firmware. NEW features! Subscribe for the latest update!Download Beta Here☚ ☛ ★ Configuration Guide ★ ☚ ☛ ★ Knowledge Base ★ ☚ ☛ ★ Troubleshooting Manual ★ ☚ (Disclaimer: Short links are used above solely for guidance to TP-Link subdomains and are safe and tracker-free. Exercise caution with short links from non-official members on forums. We are not liable for external content or damage from non-official members' link use.)
  1  
  1  
#8
Options
Re:IKEv2 VPN not working on Android 14 to ER605v2 (Galaxy S24 Ultra)
2024-04-19 01:10:59

Hi @Hambert 

Is it resolved by the above suggestions?

Best Regards! If you are new to the forum, please read: Howto - A Guide to Use Forum Effectively. Read Before You Post. Look for a model? Search your model NOW Official and Beta firmware. NEW features! Subscribe for the latest update!Download Beta Here☚ ☛ ★ Configuration Guide ★ ☚ ☛ ★ Knowledge Base ★ ☚ ☛ ★ Troubleshooting Manual ★ ☚ (Disclaimer: Short links are used above solely for guidance to TP-Link subdomains and are safe and tracker-free. Exercise caution with short links from non-official members on forums. We are not liable for external content or damage from non-official members' link use.)
  1  
  1  
#9
Options
Re:IKEv2 VPN not working on Android 14 to ER605v2 (Galaxy S24 Ultra)
2024-04-19 01:56:34

  @Clive_A hello again, as I said in my last message, yes I could finally connect from my phone after changing the remote setting to "IP Adress" and still filling something like "123" on the "identifier" field on the phone's config. Sorry if I wasn't clear enough. Thanks a lot for your assistance.

 

I suggest adding a hint on the guide if this is a Samsung only problem. 

  1  
  1  
#10
Options

Information

Helpful: 0

Views: 993

Replies: 9

Related Articles