Android VPN Client IP-SEC IKEv2 supported at ER707-M2 ???

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.

Android VPN Client IP-SEC IKEv2 supported at ER707-M2 ???

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
Android VPN Client IP-SEC IKEv2 supported at ER707-M2 ???
Android VPN Client IP-SEC IKEv2 supported at ER707-M2 ???
2023-07-20 10:33:17 - last edited 2023-12-01 01:25:29
Tags: #VPN
Model: ER707-M2  
Hardware Version: V1
Firmware Version: last

Dear all,

looking for a new router with support of Android VPN Client. I have several phones / tabs  e.g. S20,S22, tab A8 what need to connect via VPN to my network.

SInce Android has no longer support for IKEv1 the list of routers are short.

Will the new TP ER707-M2 work with this scenaro ???

Is there any usecase known, or can the tech. support give me an answer if this works??

thanks in advance

BR

nuts

  0      
  0      
#1
Options
1 Accepted Solution
Re:Android VPN Client IP-SEC IKEv2 supported at ER707-M2 ???-Solution
2023-12-01 01:25:12 - last edited 2023-12-01 01:25:29

Hi @NutsB22 

Thanks for posting in our business forum.

This might be the reason why you cannot join the IPsec. If your WAN is not a public IP on the Omada router, it won't connect. iOS definitely can. Android does not because it does not support changing the Local ID type.

You must have used port forward or DMZ in your network, right? A double-NAT situation.

In that FAQ you followed, it writes:

2) Since IKEv2 for Android cannot edit Local ID Type, only IP address can be used. So it is required that there must be no NAT device on the front of Omada router, which means the WAN IP address of Omada router must be a public IP address for the client to be able to connect successfully.

 

https://community.tp-link.com/en/business/forum/topic/643176?replyId=1286332

Best Regards! If you are new to the forum, please read: Howto - A Guide to Use Forum Effectively. Read Before You Post. Look for a model? Search your model NOW Official and Beta firmware. NEW features! Subscribe for the latest update!Download Beta Here☚ ☛ ★ Configuration Guide ★ ☚ ☛ ★ Knowledge Base ★ ☚ ☛ ★ Troubleshooting ★ ☚ ● Be kind and nice. ● Stay on the topic. ● Post details. ● Search first. ● Please don't take it for granted. ● No email confidentiality should be violated. ● S/N, MAC, and your true public IP should be mosaiced.
Recommended Solution
  0  
  0  
#27
Options
26 Reply
Re:Android VPN Client IP-SEC IKEv2 supported at ER707-M2 ???
2023-07-21 06:33:07

  @NutsB22 

 

Yes, it supports, take a look:

 

Just striving to develop myself while helping others.
  0  
  0  
#2
Options
Re:Android VPN Client IP-SEC IKEv2 supported at ER707-M2 ???
2023-07-21 07:18:40 - last edited 2023-07-21 07:21:46

  @Virgo 

 

are you sure? it is not simply this option! Have you did this config already?

 

I tried to connect android to a ER7212PC already using this article: https://www.tp-link.com/de/support/faq/3447/

And what a surprise it doesn't work. It seems the ER7212PC was not supporting the right proposals sha2.....

 

Here from the FAQ 2022 :

NOTE :

1) Since each phone supports different proposals, we only list some common proposal combinations here. If the above four combinations cannot be successfully connected, please contact Tp-Link technical support. Some of the Android models support sha2 at least, currently only ER8411 and ER605 v2 support sha2 and dh14 or above, ER605v1 and ER7206 will be supported in subsequent firmware updates.

2) Since IKEv2 for Android cannot edit Local ID Type, only IP address can be used. So it is required that there must be no NAT device on the front of the Omada router, which means the WAN IP address of the Omada router must be a public IP address for the client to be able to connect successfully.

 

=> My router will get the WAN IP via DHCP directly, so point 2 match.

But i need confirmation the new ER707-M2 support right IPSEC/IKEv2 and proposals to establish the VPN from Android.

Before I buy a second TP-link router i what to make this sure before wasting my time and money again!!!

 

  0  
  0  
#3
Options
Re:Android VPN Client IP-SEC IKEv2 supported at ER707-M2 ???
2023-07-24 02:28:04 - last edited 2023-07-25 10:07:04

  @NutsB22 

 

Yes, I'm sure, it supports SHA2, can you check the release note?

Just striving to develop myself while helping others.
  0  
  0  
#4
Options
Re:Android VPN Client IP-SEC IKEv2 supported at ER707-M2 ???
2023-07-24 07:28:23

  @Virgo

that's good to know. It's seems the ER707-M2 meet requirements of Android so far we know...!!

I bought the ER7212PC about 3 weeks ago because this router have IKEv2 and this was needed for new Android VPNs.

In the next step i learn that sha2 was also a necessary option.... mmh what next !?!?

 

The reason i open this topic was the clear question if any user or support tech was able to establish a Android 13 VPN connection with the new ER707-M2.

This use case is a challenge since Android 12? came out and not longer support IKEv1.

 

 

  0  
  0  
#5
Options
Re:Android VPN Client IP-SEC IKEv2 supported at ER707-M2 ???
2023-07-24 07:50:54

  @NutsB22 

are you seeking confirmation? at least 605 and 7206 can do that.

about the 7212pc, I don't recommend any users who seek the most recent features get this model. it's more like a model made for real business. a very small network for restaurants. not suitable for any home users who want more and more features. it lags in the update if you check it. 

anyway, the end of the buying things, will end up with a home server. at least I do. home server with router-dns-vpn-nas. 

ScReW yOu gUyS. I aM GOinG hoMe. —————————————————————— For heaven's sake, can you write and describe your issue based on plain fact, common logic and a methodologic approach? Appreciate it.
  0  
  0  
#6
Options
Re:Android VPN Client IP-SEC IKEv2 supported at ER707-M2 ???
2023-07-24 10:53:33

  @Tedd404 

 

the ER605 and ER7206 are a bit smaller and older routers. TP-link VPN article is from last year also....

We can stop talk about the ER7212PC ... i made my experiance ;-) it's enough....

 

ER707-M2 is a new player and very interessting for us people. More and better ports, faster cpu and so on.

If Android 13 VPN is supported, this router is my first choice at all!

 

 

 

  1  
  1  
#7
Options
Re:Android VPN Client IP-SEC IKEv2 supported at ER707-M2 ???
2023-07-25 00:56:36

  @NutsB22 
you're right. you can always check the firmware release first before you make a purchase. you can expect more features on there stuff as you can see there are many features added this year and it's becoming full-feathered. 

ScReW yOu gUyS. I aM GOinG hoMe. —————————————————————— For heaven's sake, can you write and describe your issue based on plain fact, common logic and a methodologic approach? Appreciate it.
  2  
  2  
#8
Options
Re:Android VPN Client IP-SEC IKEv2 supported at ER707-M2 ???
2023-07-25 10:06:23

 

then..... the main question to tp-link support is still open.

 

Can give any support member an answer if ER707-M2 works with Android 13 VPN ???

Would be happy to place an order for this product :-)

  0  
  0  
#9
Options
Re:Android VPN Client IP-SEC IKEv2 supported at ER707-M2 ???
2023-07-25 19:03:04 - last edited 2023-07-28 10:20:42

  @NutsB22 

I think, that an option will be OpenVPN. I am using IT on ER605 V1, but it will be slower, than IKEv2 VPN. Hope that some owner will confirm IKEv2 on android with ER707-M2.

  0  
  0  
#10
Options
Re:Android VPN Client IP-SEC IKEv2 supported at ER707-M2 ???
2023-07-26 07:17:00 - last edited 2023-08-04 11:51:08

Hi @NutsB22 

Thanks for posting in our business forum.

After confirming with the team, it supports after the firmware release ER707-M2(UN)_V1_1.1.0 Build 20230609. You can refer to the guide of How to connect to Omada Router using IKEv2 VPN of Android/iOS

Best Regards! If you are new to the forum, please read: Howto - A Guide to Use Forum Effectively. Read Before You Post. Look for a model? Search your model NOW Official and Beta firmware. NEW features! Subscribe for the latest update!Download Beta Here☚ ☛ ★ Configuration Guide ★ ☚ ☛ ★ Knowledge Base ★ ☚ ☛ ★ Troubleshooting ★ ☚ ● Be kind and nice. ● Stay on the topic. ● Post details. ● Search first. ● Please don't take it for granted. ● No email confidentiality should be violated. ● S/N, MAC, and your true public IP should be mosaiced.
  1  
  1  
#11
Options