IPsec with default Android Client

schmil · ‎11-17-2016

In the Log files I get "peer SA proposal not match local policy". I guess this means the Phase 1 Settings from the Android Client don't match these from the Fortigate?!? Which settings and Encryption proposals I need for the Client? The Windows Forticlient works perfectly with these Server Settings.

x_member · ‎11-22-2016

Worth also noting here that there is currently a bug on the Google Pixel phones build NDE63U and Pixel XL with the native IPSEC XAuth VPN client per 226180

This does not affect the 7.0 NRD91N builds on the Nexus phones.

schmil · ‎11-22-2016

Like I said, connection works with 'mode-cfg disable', but with wrong nameserver settings (not usable).

The connection itself doesn't come up with 'mode-cfg enable' at all! Thats the main issue.

x_member · ‎11-22-2016

Unfortunately we use a split tunnel configuration with external dns servers, so I'm not best qualified to provide any further pointers.

I did find this post for your reference though.