Why iPhone / Android / are unable to successfully connect

[bili]

I successfully installed on VPS SoftEther VPN. And I have successfully connected to the Windows system.

But why, iPhone and Android can not connect to it?

What is the problem caused by this matter? ?

Is there a solution?

Thank you!

[Plastivore]

Hi bili,

You don't give enough details for us to help very much. Do you use the SoftEther client to connect using Windows? If so, it could just be a matter of activating the L2TP server function on the server, and make it use the right VPN hub by default.

[bili]

Hi @Plastivore,

Yes, I use SoftEther client connections in Windows.

I tried using the default HUB and the new HUB, however, iPhone / Android still can not successfully connect.

Thanks！

[maltyx]

You need to enable L2TP/IPSec protocols on your VPN server if you want to use it for iPhone/Androind vpn clients..

[bili]

Hi, @ maltyx,

I have a choice and enable L2TP / IPSec protocols.

So, I do not know where the problem lies.

[maltyx]

please check all your configuration following the following manual:
https://www.softether.org/4-docs/2-howt ... VPN_Server

double check your firewall/router and make sure you have open( or made porforward) the following sockets:
UDP port 500 and 4500 (UDP not TCP!)

[bili]

maltyx wrote:
> please check all your configuration following the following manual:
>
> https://www.softether.org/4-docs/2-howt ... VPN_Server
>
> double check your firewall/router and make sure you have open( or made
> porforward) the following sockets:
> UDP port 500 and 4500 (UDP not TCP!)

Hi @maltyx, @torakamo

I have to open these ports：443，500，4500，1701，5555，1194. But still did not solve the problem.

-A INPUT -p tcp -m tcp --dport 443 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 500 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 4500 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 1701 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 5555 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 1194 -j ACCEPT

Thanks！

[maltyx]

UDP port 500 and 4500 !
UDP protocol - not TCP ..

your VPN server is connected with public IP or behind the FW?

[bili]

Hi，@maltyx，Thanks！

Problem has been resolved!


maltyx wrote:
> UDP port 500 and 4500 !
> UDP protocol - not TCP ..
>
> your VPN server is connected with public IP or behind the FW?

[lauraz]

Why not use FlyVPN Android App? You can search "FlyVPN" on Google Play Store. After logging in on FlyVPN Android App for the first time, you'll get 14 days free membership.

[Mada]

My Android VPN also fails to connect with the latest build!

What has changed? My log indicates nothing:

2016-05-09 20:47:56.195 IPsec Client 6 (x:6753 -> x:500): A new IPsec client is created.
2016-05-09 20:47:56.195 IPsec IKE Session (IKE SA) 6 (Client: 6) (x:6753 -> x:500): A new IKE SA (Main Mode) is created. Initiator Cookie: x, Responder Cookie: x, DH Group: MODP 1024 (Group 2), Hash Algorithm: SHA-1, Cipher Algorithm: 3DES-CBC, Cipher Key Size: 192 bits, Lifetime: 4294967295 Kbytes or 28800 seconds
2016-05-09 20:47:56.241 [HUB "x"] SecureNAT: The UDP session 39561 has been created. Connection source x:4500, Connection destination x:4500
2016-05-09 20:47:56.241 IPsec Client 6 (x1:63889 -> x:4500): The port number information of this client is updated.
2016-05-09 20:47:56.241 IPsec Client 6 (x:63889 -> x:4500):
2016-05-09 20:47:56.241 IPsec IKE Session (IKE SA) 6 (Client: 6) (x:63889 -> x:4500): This IKE SA is established between the server and the client.
2016-05-09 20:47:57.257 IPsec IKE Session (IKE SA) 6 (Client: 6) (x:63889 -> x:4500): The client initiates a QuickMode negotiation.
2016-05-09 20:47:57.257 IPsec ESP Session (IPsec SA) 6 (Client: 6) (x:63889 -> x:4500): A new IPsec SA (Direction: Client -> Server) is created. SPI: x, DH Group: (null), Hash Algorithm: SHA-1, Cipher Algorithm: 3DES-CBC, Cipher Key Size: 192 bits, Lifetime: 4294967295 Kbytes or 28800 seconds
2016-05-09 20:47:57.257 IPsec ESP Session (IPsec SA) 6 (Client: 6) (x:63889 -> x:4500): A new IPsec SA (Direction: Server -> Client) is created. SPI: x, DH Group: (null), Hash Algorithm: SHA-1, Cipher Algorithm: 3DES-CBC, Cipher Key Size: 192 bits, Lifetime: 4294967295 Kbytes or 28800 seconds
2016-05-09 20:47:57.273 IPsec ESP Session (IPsec SA) 6 (Client: 6) (x:63889 -> x:4500): This IPsec SA is established between the server and the client.

[Mada]

Noticed that my server certificate has changed. Issued to and issuer do not match DynDNS name of server.

Can this be my problem when unable to vpn from android anymore?

[Mada]

I regenerated the server certificate. No luck. Still not able to connect with android.

[Mada]

My android vpn connection just started to work again.