Does the native VPN client support IKEv1 as of Android 12?



  • Is there any official documentation on what IPSec key exchange types are supported by the native Android 12 IPSec client (Racoon)? Specifically I’m interested in whether IKEv1 still works.

    I’m asking this because I’m thrown off by https://openwrt.org/docs/guide-user/services/vpn/strongswan/roadwarrior#for_android_clients which seems to indicate that as of v12, only IKEv2 modes are supported, killing off ISAKMP which has worked until v11. After spending some time searching for an official announcement or even just a feature list I came up empty handed.

    The screenshot on this Github issue: https://github.com/SoftEtherVPN/SoftEtherVPN/issues/1373 appears to confirm the removal of IKEv1 in v12.



  • The answer is no.

    This commit added an exception that is thrown when the user tries to initiate an IKEv1 connection. The https://issuetracker.google.com/issues/189808606 with the id given in the commit message is non-public so presumably this change was motivated not by technical but policy considerations.




Suggested Topics

  • 2
  • 2
  • 2
  • 2
  • 2
  • 2
  • 2
  • 2
  • 2
  • 2
  • 2
  • 2
  • 2
  • 2
  • 2