Configure Android Devices for Mobile VPN with IKEv2

To configure a VPN connection between your Android device and a Firebox, we recommend the free strongSwan app. Not all Android versions or devices include native support for IKEv2 VPNs.

To add the VPN connection on your device, you can use the StrongSwan profile provided by WatchGuard or manually configure settings on the device. This topic explains both methods.

Multi-Factor Authentication (MFA)

If you configure AuthPoint to provide multi-factor authentication for Mobile VPN with IKEv2 users:

  • Android users who connect through the strongSwan VPN client receive AuthPoint MFA push notifications only if you configure strongSwan for split tunneling.
  • When configured for full tunneling, strongSwan cannot receive AuthPoint push notifications. This limitation applies to local AuthPoint user accounts and LDAP user accounts.

To configure split tunneling in strongSwan, see the documentation provided by strongSwan. For more information about WatchGuard mobile VPNs and multi-factor authentication, see Use Multi-Factor Authentication (MFA) with Mobile VPNs.

Automatically Configure VPN Settings

To configure a VPN connection with the StrongSwan profile provided by WatchGuard, you must download a compressed .TGZ file from your Firebox. This file contains instructions, profiles, and scripts for various operating systems. For information about how to download this file, see Configure Client Devices for Mobile VPN with IKEv2.

The profile provided by WatchGuard creates a new IKEv2 VPN profile in the strongSwan app on your Android device. It also installs the required CA certificate for the VPN connection.

WatchGuard provides interoperability instructions to help our customers configure WatchGuard products to work with products created by other organizations. If you need more information or technical support about configuring a non-WatchGuard product, see the documentation and support resources for that product.

Manually Configure VPN Settings

See Also

About Mobile VPN with IKEv2

Configure Client Devices for Mobile VPN with IKEv2

Configure iOS and macOS Devices for Mobile VPN with IKEv2

Configure Windows Devices for Mobile VPN with IKEv2

Troubleshoot Mobile VPN with IKEv2