• Android 4.4 was used to create this configuration
• First execute the first step that is described in the Windows example
  • Example Configuration - Roadwarrior with Windows
  • Note: You may also use the same certificate created in the Windows configuration
    • If you do so, you need to use a different CONNECTION_NAME (e.g., “Android Phone”) in the conn line
• Additionally, you need to execute the second step described in the Windows example
  • Do not modify the /etc/ipsec.conf instead, modify the /etc/ipsec.user.conf by adding the following lines:

conn "Android Phone"
    left=%defaultroute
    leftsubnet=0.0.0.0/0
    leftfirewall=yes
    lefthostaccess=yes
    leftallowany=yes
    leftcert=/var/ipfire/certs/hostcert.pem
    right=%any
    rightsourceip=%dhcp
    rightcert=/var/ipfire/certs/CONNECTION_NAMEcert.pem
    rightauth2=xauth
    keyexchange=ikev1
    ikelifetime=1h
    keylife=8h
    dpddelay=30s
    dpdtimeout=120s
    dpdaction=clear
    auto=add
    compress=yes

• Modify the /etc/ipsec.user.secrets by adding the following lines:

USERNAME : XAUTH "PASSWORD"

• Restart the ipsec daemon, type /etc/init.d/ipsec restart

• Download the certificates to the device
  • You can attach the device to USB and copy the downloaded connection certificate
  • Alternatively: You can go to the IPSec page on the Android device and download the certificate there
  • Optionally, you can download the host certificate to the device
    • Prefixing the name with “host” can make sense