Original topic:

ipsec vpn setup

(Topic created on: 12-27-2022 03:57 PM)
1410 Views
betchern0t
Beginner Level 2
Options
Galaxy A

Hi,

       we have several samsung  galaxy devices - both phones and tablets -  in the house. I am trying to setup a ipsec ikev2-psk vpn. To do this I need to know which cipher suites or proposals are supported in phase 1 and phase 2. Essentially both the samsung device and the router need to have at least one shared set for them to talk.

At this point I have a google pixel 6 successfully connecting  so it is very likely that the issue is no shared cipher/proposal. Can someone please either supply the list of supported proposals or point me to where they are documented? The manual just says ask the administrator. Since I am the administrator that doesn't help.

Many thanks in advance

Paul

1 Comment
betchern0t
Beginner Level 2
Galaxy A

The following appears to be what my samsung tablet A7 lite appears to be sending:

phase 1

sha2-aes_256 dh 16
sha2-aes_128 dh 16
sha1-aes_256 dh 16
sha1_aes_128 dh 16
sha2-aes_256 dh 5
sha2-aes_128 dh 5
sha1-aes_256 dh 5
sha1_aes_128 dh 5
sha2-aes_256 dh 20
sha2-aes_128 dh 20
sha1-aes_256 dh 20
sha1_aes_128 dh 20
sha2-aes_256 modp 2048_256
sha2-aes_128 modp 2048_256
sha1-aes_256 modp 2048_256
sha1_aes_128 modp 2048_256

phase 2

esp-aes_256_dh 16
esp aes_128_dh 16

however despite these matching some proposals on the router it is still failing

0 Likes