Skip to content

Latest commit

 

History

History
49 lines (39 loc) · 3.7 KB

client-android.md

File metadata and controls

49 lines (39 loc) · 3.7 KB
Raw

Android client setup

Installation via profiles

  1. Install the strongSwan VPN Client.
  2. Copy android_{username}.sswan and android_{username}_helper.html to your phone's internal storage.
  3. Open the StrongSwan app and go to 'Import VPN profile'.
  4. Select the android_{username}.sswan file to configure the VPN with your profile.

Manual installation

NOTE: If you are a Project Fi user, you must disable WiFi Assistant before continuing. See the strongSwan documentation for details.

Instruction Screenshot(s)
1. Copy your {username}.p12 certificate to your phone's internal storage.
2. Install the strongSwan VPN Client (Android 4+)
3. Open the app and tap "ADD VPN PROFILE" in the top right. step3-thumb
4. Enter the IP address or hostname of your Algo server and set the "VPN Type" to "IKEv2 Certificate". step4-thumb
5. Tap "Select user certificate". You will be shown a prompt, tap "INSTALL". step5-thumb
6. Use the "Open from" menu to select your certificate. If you downloaded your certificate to your phone, you may find that using the "Downloads" shortcut results in your {username}.p12 certificate being grayed out. If this happens go back to the "Open from" menu and tap on the name of your phone. This will bring up the filesystem. From here, navigate to the folder where you saved your cert (such as "Downloads"), and try again. step6-thumb
7. Enter the password for your certificate. This password was printed to your console at the end of running the algo deployment script. Please note that in some cases, extracting the certificate can take several minutes. step7-thumb
8. Give your certificate a name (it will default to your Algo username), and ensure that "Credential use" is set to "VPN and apps". Tap "OK". step8-thumb
9. You'll then be brought to another prompt. Ensure your newly imported certificate is selected, and tap "ALLOW". Then, tap "SAVE" in the top right. step9-thumb
10. You will be returned to the main menu, and your newly-configured VPN profile should be listed. Tap the profile to connect. step10-thumb

Troubleshooting

Tapping the VPN profile in strongSwan has no effect.

Ensure that "WiFi Assistant" and any other always-on VPNs are disabled before attempting to enable a strongSwan VPN. If any other VPN is active, strongSwan may silently fail to initialize a VPN connection. On Android 7, your can manage your VPNs by going to: Settings > Tap "More" under "Wireless & networks" > VPN > tap the gear icon next to any non-strongSwan VPNs listed and ensure they are disabled.