Skip to main content
Explorer II
May 12, 2026
Solved

FortiClient VPN Android Phone

  • May 12, 2026
  • 28 replies
  • 2057 views

I am having an issue with the FortiClient IPsec IKEv2 VPN connection on Android. I entered all the required information correctly and tried many configuration changes, but the issue still persists. When I attempt to connect, I receive a “Null” error message.

At the same time, I tested the same VPN configuration on my iPhone, and the connection works perfectly without any issues.

 

 

Iphone Settings

 

 

Android Phase2 Settings

 

 

 

 

Andorid VPN Settings

 

Best answer by Dzhem35

I resolved the issue: it was caused by using both EAP and PSK authentication methods together. While this configuration works properly on IOS devices, Android devices do not support it correctly. After removing EAP and using only PSK authentication, the connection issue was successfully resolved.

28 replies

funkylicious
SuperUser
SuperUser
May 12, 2026

maybe 

 

"jack of all trades, master of none"
Dzhem35Author
Explorer II
May 12, 2026

Yeah, I tried to analyze the log, but when I tried to connect from my phone, the tunnel wasn't go further, so I'm not getting any logs about the mobile VPN.

Toshi_Esumi
SuperUser
SuperUser
May 12, 2026

If it doesn’t hit the FGT, the problem is on the android phone environment. Only thing I would try is to uninstall the app and reinstall it again. I’m guessing you already tried it though. 

Toshi

Anthony_E
Staff
Staff
May 12, 2026
Dzhem35Author
Explorer II
May 12, 2026

Thanks for the reply but this documentation about SSL VPN ı am using IpSec VPN Tunnel

Dzhem35AuthorAnswer
Explorer II
May 12, 2026

I resolved the issue: it was caused by using both EAP and PSK authentication methods together. While this configuration works properly on IOS devices, Android devices do not support it correctly. After removing EAP and using only PSK authentication, the connection issue was successfully resolved.

Toshi_Esumi
SuperUser
SuperUser
May 12, 2026

I thought both types of phones required EAP for any IPsec VPNs.
Maybe only IKEv2.

Toshi

Dzhem35Author
Explorer II
May 12, 2026

Yeah ı thought so, after read some docs and another android client vpn issue ı solved it. I think both devices should use that

Visitor II
August 4, 2026

My phone is assigned a company IP address, but I still can't access the internal network. I'm using IPsec IKEv2 with SAML and SSO. It works fine on both my PC and iPhone. Could this be the same issue you mentioned?

Dzhem35Author
Explorer II
August 4, 2026

Ası can see you already connected to VPN but if you can not reach internal network you need to add new Policy from Mobile IpSec VPN to Internal Network

Visitor II
August 4, 2026

Can you guide me configure it, on both the PC and iPhone, the VPN connects successfully and is assigned the same IP range, and they can access the internal network. However, on Android, although it also connects and receives an IP address, it cannot access the internal network

New Member
August 7, 2026

​@Dzhem35 : I have the same isue with IPSEC VPN and android phone, could you share your VPN configuration?
I received this when trying connect to VPN from my android phone: 
VPN negotialtion failed runinitiator: run SA init: send SA ini request: timeout waiting for response

Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.