Which one to choose to choose a VPN server for Android 4 client?

I

Ilya Zelikin2012-09-17 17:46:20

Android

Ilya Zelikin, 2012-09-17 17:46:20

Available:
- Android 4 smartphone
- Internet connection via corporate Wi-Fi (WPA2, AES, 802.1x PEAP with AD login) without proxy.
- At home, 2 servers to choose from Ubuntu or OpenWRT, looking at the Internet with a real white static IP.
- Direct hands and Google with Habr to set up a VPN service on any of these servers.
Task:
Wrap all traffic (ideally, along with DNS, ICMP and other UDP) in a VPN tunnel to the house.
It is advisable to use a standard Android 4 VPN client that offers a choice of:
- PPTP (beware of it!)
- L2TP / IPSec (there is a choice between PSK or RSA key)
- IPSec Xauth (also PSK or RSA)
- Mysterious IPSec Hybrid RSA
The catch is that OpenVPN is not supported out of the box.
Yes, if necessary, you can install custom firmware with its support or root smart and install everything yourself. But let that be Plan B.
In the meantime, please advise which of the standard options is better and why .
What are the advantages (the overhead may be less, the speed is higher, there is compression, it's easier to set up ...) and what are the disadvantages. And also poke your nose, if possible, into manuals or suitable articles on the proposed option. Quite alternative and original solutions are also considered.
PS: Something tells me (or rather the experience with the beeline and xl2tpd) that L2TP is one more confusing. Please dissuade me if this is not the case.

Reply

Answer the question

In order to leave comments, you need to log in

8 answer(s)

D

den_admin, 2012-09-18
@zilia

in general, there is an openvpn client for android, and you don’t even need a rooted device:
play.google.com/store/apps/details?id=de.blinkt.openvpn

I

Ilya Zelikin, 2012-09-18
@zilia

I will always update... :)))

S

shadowalone, 2012-09-19
@shadowalone

L2TP / IPSec will be the best option, because, in the case of pptp, it will not be possible to connect via mobile communications, providers generally block GRE.
I think you will find how to raise L2TP / IPSec without problems, especially since there are already links in other answers.
The Android client out of the box is perfectly able to L2TP / IPSec.

A

Antelle, 2012-09-18
@Antelle

I picked up l2tp / ipsec: here , for example, is a manual on how to do this: I didn’t notice any special problems. I also installed a dns server, wrapped a lot of ad hosts on 127.0.0.1 in it and got rid of ads in this way without jailbreak.

I

Igor, 2012-09-18
@shanker

Firstly, I doubt that without root rights you will be able to solve the problem, because. installing a tun virtual adapter will most likely require these rights.
Secondly, it is possible to make a VPN via SSH However, it is not a fact that the SSH servers available under Android will be able to provide you with this service. But it would be necessary to check. But what if.

I

Igor, 2012-09-18
@shanker

You can also try using Reverse SSH tunnel . Those. SSH server is placed on the home computer.
But in this way, all traffic cannot be forwarded. TCP/UDP only (because socks5 only supports them).
PS

ICMP and other UDP

ICMP is not related to UDP

A

Akint, 2012-09-19
@Akint

At my place I use pptpd (the setup is extremely simple, for example, like here ) + a standard android vpn client.

Z

ZoraX, 2015-08-23
@ZoraX

As people already wrote - use openvpn. And in order not to fool around with the maintenance of the vpn server with the headaches of paying for VPS or VDS, I would connect a private tunnel - this is the brainchild of openvpn. Everything is fair here, I paid $ 12 and you get forever 50 GB of traffic until you spend it. 6 locations for vpn, new countries will be added. Watch Here