82.4. NCP VPN Client

82.4.1. Installing NCP VPN client

Go to https://play.google.com/store/apps/details?id=de.ncp.vpn.basic to download and install the NCP VPN client.

82.4.2. Checklist of parameters

This table show the parameters of NCP VPN Client and their corresponding parameters in Abilis configuration. The information must be inserted in a “mirror” way: i.e. “LOCAL” information for Abilis are “REMOTE” for IPsec VPN client and vice versa.

Table 82.5. Checklist of parameters

The iPhone/iPad native IPsec parameterAbilis IKE TableAbilis IKE Table parameter
Gateway (Tunnel Endpoint)HOSTLOC-IP
Pre-shared Key / GroupPwdPSKKEY
EncryptionHOSTCIPHER
IKE ID / Group ID TypeHOSTID-TYPE
IKE / Group IDHOSTIP
IKE DH GroupHOSTDH
AuthenticationHOSTAUTH
HashHOSTHASH
EncryptionCLIESP-CIPHER
AuthenticationCLIESP-AUTH

82.4.3. Configuring NCP VPN Client

Suppose that Abilis is configured in the following way. Refer to Section 74.19.1, “How to configure a RAS using IPSEC VPN server” to for the configuration of IPsec and IKE resources.

[14:52:09] ABILIS_CPX:d ike host:15

Parameter:  | Value:
------------+------------------------------------------------------------------
HOST:         15
NAME:         Android_NCP
LOC-IP:       192.168.050.002     
REM-IP:       *                   
NATT:         SYS
AUTH:         PSK   
HASH:         MD5
DH:           MODP1024
CIPHER:       3DES
SIDE:         INSIDE
XAUTH:        NO
XAUTH-USER:   
XAUTH-PWD:    
MODE-CFG:     NO
KEYING-TRIES: 3
LIFE-TIME:    3600
DPD-ENABLE:   NO
DPD-DELAY:    30
DPD-TIMEOUT:  120
DPD-ACTION:   STOP
ID-TYPE:      IP
IP:           192.168.050.002
PEER-ID-TYPE: IP
PEER-IP:      192.168.050.002
-------------------------------------------------------------------------------


[14:43:16] POZZOLI_AL_PBX:_d ike cli:20

Parameter:  | Value:
------------+------------------------------------------------------------------
CLI:          20
NAME:         Adroid_NCP
HOST-ID:      15
RULE:         IPSEC
PASSIVE:      YES
PERMANENT:    YES
TUNNEL:       YES
ESP:          YES
ESP-CIPHER:   3DES
ESP-AUTH:     MD5
AH:           NO
AH-AUTH:      MD5
LIFE-TIME:    28800
PFS:          NO
NET-LOC:      000.000.000.000/00
NET-REM:      192.168.240.016/32
MODE-CFG-DNS: SYS
-------------------------------------------------------------------------------

To configure an Android NCP VPN Client for IPsec VPN connection with Abilis, follow the screen below :