The native Android IPsec VPN client supports connections to the Cisco ASA firewall. This even works without the “AnyConnect for Mobile” license on the ASA. If only a basic remote access VPN connection is needed, this fits perfectly. It uses the classical IPsec protocol instead of the newer SSL version. However, the VPN tunnel works anyway.
In this short post I am showing the configuration steps on the ASA and on the Android phone in order to establish a remote access VPN tunnel.
No additional client software, such as the Cisco VPN client software, is required. This document provides a sample configuration for the native L2TP/IPSec Android client. It takes you through all the necessary commands required on a Cisco Adaptive Security Appliance (ASA), as well as the steps to be taken on the Android device itself. The Cisco AnyConnect Secure Mobility Client for Android provides seamless and secure remote access to enterprise networks. AnyConnect allows installed applications to communicate as though connected directly to the enterprise network. Cisco AnyConnect VPN Client for Android. Follow the instructions below to set up the AnyConnect Secure Mobility Client on your Android device. Instructions Download/install: On your device: Go to the app store on your Android device and download.
Cisco Vpn Android Apk
I am running a Cisco ASA 5505 with version 9.2(4). The Android smartphone is a Samsung Galaxy S4 Mini with Android 4.4.2.
Cisco ASA Config
The configuration steps on the ASA are mostly the same as for a classical VPN-Client connection profile:
Or the appropriate CLI commands: Marvell port devices driver download.
2 4 6 8 10 12 14 16 18 20 22 24 26 28 30 32 34 36 38 40 42 | ip local pool Pool_192.168.133.0192.168.133.10-192.168.133.99mask255.255.255.0 crypto ipsec ikev1 transform-set ESP-AES-128-SHA esp-aes esp-sha-hmac crypto ipsec ikev1 transform-set ESP-AES-256-SHA esp-aes-256esp-sha-hmac crypto dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP65535set pfs group5 crypto dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP65535set ikev1 transform-set ESP-AES-256-SHA ESP-AES-128-SHA crypto dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP65535set ikev2 ipsec-proposal AES256 crypto map outside_map65535ipsec-isakmp dynamic SYSTEM_DEFAULT_CRYPTO_MAP ! crypto ikev1 policy10 encryption aes-256 group5 crypto ikev1 policy30 encryption aes-256 group2 crypto ikev1 policy90 encryption aes group2 ! group-policy MainVPN attributes vpn-tunnel-protocol ikev1 ssl-client ! tunnel-group MainVPN general-attributes default-group-policy MainVPN ikev1 pre-shared-key***** |
Android IPsec PSK
This is how the VPN connection must be configured: Honor girl maggie thrash.
ASA Logs
Dedrm calibre mac os. After a connection establishment, the VPN session details on the ASA show details:
And, of course, via the CLI:
Cisco Vpn Android Apk
2 4 6 8 10 12 14 16 18 | Assigned IP:192.168.133.10Public IP:194.29.191.227 License:Other VPN Encryption:IKEv1:(1)AES256 IPsecOverNatT:(1)AES256 Bytes Tx:138957Bytes Rx:483030 Login Time:15:46:24CEST Mon Oct262015 Inactivity:0h:00m:00s Audt Sess ID:c0a88201000e9000562e3cc0 |
Download Cisco Vpn Android
Featured image “Androids” by etnyk is licensed under CC BY-NC-ND 2.0.