82.4. NCP VPN Client

82.4. NCP VPN Client
	Chapter 82. IPsec clients

82.4.1. Installing NCP VPN client

Go to https://play.google.com/store/apps/details?id=de.ncp.vpn.basic to download and install the NCP VPN client.

82.4.2. Checklist of parameters

This table show the parameters of NCP VPN Client and their corresponding parameters in Abilis configuration. The information must be inserted in a “mirror” way: i.e. “LOCAL” information for Abilis are “REMOTE” for IPsec VPN client and vice versa.

Table 82.5. Checklist of parameters

The iPhone/iPad native IPsec parameter	Abilis IKE Table	Abilis IKE Table parameter
Gateway (Tunnel Endpoint)	HOST	`LOC-IP`
Pre-shared Key / GroupPwd	PSK	`KEY`
Encryption	HOST	`CIPHER`
IKE ID / Group ID Type	HOST	`ID-TYPE`
IKE / Group ID	HOST	`IP`
IKE DH Group	HOST	`DH`
Authentication	HOST	`AUTH`
Hash	HOST	`HASH`
Encryption	CLI	`ESP-CIPHER`
Authentication	CLI	`ESP-AUTH`

82.4.3. Configuring NCP VPN Client

Suppose that Abilis is configured in the following way. Refer to Section 74.19.1, “How to configure a RAS using IPSEC VPN server” to for the configuration of IPsec and IKE resources.

[14:52:09] ABILIS_CPX:d ike host:15

Parameter:  | Value:
------------+------------------------------------------------------------------
HOST:         15
NAME:         Android_NCP
LOC-IP:       192.168.050.002     
REM-IP:       *                   
NATT:         SYS
AUTH:         PSK   
HASH:         MD5
DH:           MODP1024
CIPHER:       3DES
SIDE:         INSIDE
XAUTH:        NO
XAUTH-USER:   
XAUTH-PWD:    
MODE-CFG:     NO
KEYING-TRIES: 3
LIFE-TIME:    3600
DPD-ENABLE:   NO
DPD-DELAY:    30
DPD-TIMEOUT:  120
DPD-ACTION:   STOP
ID-TYPE:      IP
IP:           192.168.050.002
PEER-ID-TYPE: IP
PEER-IP:      192.168.050.002
-------------------------------------------------------------------------------


[14:43:16] POZZOLI_AL_PBX:_d ike cli:20

Parameter:  | Value:
------------+------------------------------------------------------------------
CLI:          20
NAME:         Adroid_NCP
HOST-ID:      15
RULE:         IPSEC
PASSIVE:      YES
PERMANENT:    YES
TUNNEL:       YES
ESP:          YES
ESP-CIPHER:   3DES
ESP-AUTH:     MD5
AH:           NO
AH-AUTH:      MD5
LIFE-TIME:    28800
PFS:          NO
NET-LOC:      000.000.000.000/00
NET-REM:      192.168.240.016/32
MODE-CFG-DNS: SYS
-------------------------------------------------------------------------------

To configure an Android NCP VPN Client for IPsec VPN connection with Abilis, follow the screen below :

	Tip
Interesting chapters: Section 74.19, “How to configure a Remote Access Server (RAS)”; Section 43.5, “Example of IPSEC configuration”.

Tip

Interesting chapters:

Section 74.19, “How to configure a Remote Access Server (RAS)”;

Section 43.5, “Example of IPSEC configuration”.


82.3. iPhone/iPad native IPsec VPN client		Chapter 83. PPPoE clients