To the knowledge base

Setting up an IPSec VPN to the FRITZ!Box in Android

With IPSec, you can establish VPN connections to the FRITZ!Box on your Android smartphone or tablet and access your FRITZ!Box and all devices in your home network over a secure, encrypted connection, even when you are away from home.

In addition, the mobile device also forwards all web requests over the VPN connection to your FRITZ!Box. This means you can use sensitive services such as email or online banking in public Wi-Fi hotspots just as securely as if you were directly connected to your FRITZ!Box via Wi-Fi at home.

You can find an overview of additional VPN connection options in our guide VPN with FRITZ!.

Important:If you do not want to route web requests via your FRITZ!Box but only want to access your FRITZ!Box and devices in the home network, you can use MyFRITZ!App to quickly and easily establish the VPN connection.

Requirements / Restrictions

  • The FRITZ!Box must either obtain an IPv6 address or a public IPv4 address from the internet service provider.
  • The mobile network provider must allow incoming connections to the FRITZ!Box.

    Important:Many mobile network providers block incoming connections or only allow ones with special contracts.

Note:All instructions on configuration and settings given in this guide refer to the latest FRITZ!OS for the FRITZ!Box.

1 Preparations

Configuring MyFRITZ!

Register the FRITZ!Box with MyFRITZ!Net so that it can always be reached on the internet at a fixed MyFRITZ! address:

Setting up MyFRITZ!
  1. Click "Internet" in the FRITZ!Box user interface.
  2. Click on "MyFRITZ! Account" in the "Internet" menu.
  3. Enter your email address in the "Your email address" field.
  4. Click on "Apply". Now MyFRITZ!Net sends you an email with the confirmation link to your FRITZ!Box.

    Important:If you do not receive an email, the email was classified as unsolicited advertising (spam). In this case, check the spam folder of your email inbox.

  5. Open the email you received from MyFRITZ!Net.
  6. Click the "Register Your FRITZ!Box" button in the email.

Adjusting the FRITZ!Box's IP network

Both ends of the VPN connection must have IP addresses in different IP networks. As soon as the mobile device is connected to a router (for example another FRITZ!Box) that uses the same IP network as your FRITZ!Box, VPN communication is no longer possible.

Note:All FRITZ!Boxes use the IP network 192.168.178.0 in the factory settings.

Set up an IP address in your FRITZ!Box that differs from the IP addresses of the routers you use to connect to the FRITZ!Box, for example 192.168.10.1 (subnet mask 255.255.255.0):

Changing the FRITZ!Box's IP network
  1. Click "Home Network" in the FRITZ!Box user interface.
  2. Click on "Network" in the "Home Network" menu.
  3. Click on the "Network Settings" tab.
  4. Click "Additional Settings" in the section "LAN Settings" to display all of the settings.
  5. Click the "IPv4 Settings" button.
  6. Enter the desired IP address and subnet mask.
  7. Click "Apply" to save the settings and on the FRITZ!Box, confirm that the procedure may be executed, if you are asked to do so.

2 Setting up a VPN connection in the FRITZ!Box

Set up a separate user for each VPN connection in the FRITZ!Box:

Creating VPN settings for a FRITZ!Box user
  1. Click "System" in the FRITZ!Box user interface.
  2. Click "FRITZ!Box Users" in the "System" menu.
  3. Click the (Edit) button for the user who intends to connect to the FRITZ!Box via VPN or set up a new user for the VPN connection:
    1. Click the "Add User" button.
    2. Enter a name and password for the user in the corresponding fields.
  4. Enable the option "VPN".
  5. Click "Apply" to save the settings and on the FRITZ!Box, confirm that the procedure may be executed, if you are asked to do so.

3 Opening the VPN settings

Calling up VPN settings of the FRITZ!Box user
  1. Click "Internet" in the FRITZ!Box user interface.
  2. Click on "Permit Access" in the "Internet" menu.
  3. Click the "VPN (IPSec)" tab.
  4. Click the "VPN Settings" link for the user who intends to connect to the FRITZ!Box via VPN.
  5. If you are asked to do so, on the FRITZ!Box confirm that the procedure may be executed and click "OK" to complete the procedure.

4 Setting up a VPN connection in Android

Configuring a VPN connection in Android
  1. Set up the VPN connection on the mobile device using the VPN settings displayed in the FRITZ!Box user interface for the FRITZ!Box user:

5 Establishing a VPN connection

  1. Open the "Settings" on your mobile device.
  2. Tap "Network & Internet" in the "Settings".
  3. Tap "VPN".
  4. Tap the name of the VPN connection you set up (FRITZ!Box).
  5. If you are asked to enter a name and password:
    1. For the "Name", enter the name of the FRITZ!Box user (Anna) who intends to connect to the FRITZ!Box via VPN.

      Note:If you select an entry from the word prediction for the username and Android automatically adds a space to it, delete the space.

    2. Enter the password for the FRITZ!Box user (secret1234) as the "Password".
  6. Tap the "Connect" button.