I have a Draytek 2860N , I am a noob. Is there a forum topic here or a link I could use to setup as a road warrior usin LT2p over ipsec. Phone to router, Pc to Router ?

PC to Router: https://www.draytek.co.uk/support/guides/kb-teleworker-smartvpn-l2tpoveripsec (This uses the SmartVPN client to configure the connection. You could dispense with it, once you see how it's configured the Windows software - but unless you want to 'script' connections (using Rasdial), it's probably easiest just to use it, "as-is").

Phone to Router: https://www.draytek.co.uk/support/guides/kb-teleworker-smartvpn-l2tpoveripsec-ios . This is for IOS - you can probably guess the equivalent Android commands - though there's probably a guide somewhere.

The quickest way to get a VPN client running on a phone, is to use the SmartVPN Client (i.e. SSL VPN): https://www.draytek.co.uk/information/our-technology/sslvpn .

This tends to connect more easily (and not get blocked by firewalls) than L2TP, but its throughput is noticeably less. I believe the encryption isn't quite as good as IPSec.

A big thank you. I will attempt this now. Really appreciate you taking the time.

Depending on the Android device and version you have, there are some problems with L2TP IPSec.

I have a Samsung S3 running Android 4.3 which connects to my L2TP/IPsec VPN on the the 2860 with no problem at all. My S7 Edge running Android 8.0 however refuses to connect because Samsung haven't modified their kernel.

You can find out why it doesn't work in this Android issue tracker report:-

https://issuetracker.google.com/issues/37074640#comment279

https://issuetracker.google.com/issues/37074640#comment317

John.

Anaglypta wrote: Depending on the Android device and version you have, there are some problems with L2TP IPSec.

I have a Samsung S3 running Android 4.3 which connects to my L2TP/IPsec VPN on the the 2860 with no problem at all. My S7 Edge running Android 8.0 however refuses to connect because Samsung haven't modified their kernel.

You can find out why it doesn't work in this Android issue tracker report:-

https://issuetracker.google.com/issues/37074640#comment279

https://issuetracker.google.com/issues/37074640#comment317

John.

Just to bring this up to date DrayOS version 3.8.9.1 got updated LAN to LAN proposals, and this work seems to have corrected the issue for non compliant Android devices running Android 6 and above. I'm guessing that the Proposal order in USER dial in changed at the same time.

If I get time I'll run SYSLOG to check what now happens!

John.