IPSec VPN on AsusWRT-Merlin

[sbsnb]

Android has dropped support for IPSec/XAuth PSK as of Android 12. I want to look into using IPSEC VPN because OpenVPN clients on Android consume MASSIVE amounts of battery (as in taking a phone from lasting two days on a charge to depleting the battery in 12 hours with zero screen usage). Does anyone know if there's any plans to update the VPN server in the firmware to support other modes?

 

[RMerlin]

I have no plan to make any changes to the IPSEC implementation. It's entirely Asus'.

 

[sbsnb]

I guess the bright side is that once iPhones drop support Asus can just remove all the IPSEC code from the firmware.

 

[sbsnb]

I'm trying to resign myself to OpenVPN clients, but none of them can be triggered upon connection to certain WiFi access points. Is there a client that integrates with Android so the VPN can be started automatically when you connect to certain access points?

It trips me out that Android has been around well over a decade and we're still having to use bubble gum and aluminum foil to make VPNs work.

 

[Volfi]

There is Asus Instant Guard app, which is able to establish IPSec VPN connection even on Android 12 and 13

Instant Guard - Apps on Google Play

Easily building up a security connection between your device and ASUS Router.

play.google.com

 

[papypaprika]

You can also set-up an IPSEC IKEv2 connection.

almost no battery drain:

[OpenWrt Wiki] IPsec Modern IKEv2 Road-Warrior Configuration

openwrt.org

and with the following type of profiles you can make on demand connections depending on the Wifi you use

How to manually configure IKEv2 VPN on iOS?

The 386 Beta firmware supports IKEv2 VPN. I have requested a TestFlight invite for the Instant Guard iOS App to configure this, but did not get that invite yet, so I was hoping to configure this manually on my iOS devices. These are the instructions for Windows...

www.snbforums.com