How can we help you?

Topics ▼
  1. Live Chat, VPN Setup, Troubleshooting | NordVPN Customer Support
  2. General info
  3. General

Connecting to NordVPN from country with internet restrictions

If you're experiencing internet restrictions that are limiting your access to online content, there is a solution available to help you bypass these restrictions. In this article, we'll provide step-by-step instructions on how to bypass internet restriction on various devices, including Windows, Mac, Android, strongSwan, and iOS. Choose a section relative to you down below to begin:

 

  • Windows
  • macOS
  • Android - OVPN
  • Android - IKEv2
  • iOS
  • strong Swan

Avoiding local internet restrictions on Windows

 

Note: Unfortunately, we are currently experiencing some connectivity issues in the China region as our server configurations for manual connections and applications have recently been blocked. Our developers are aware of the issue and are working on a solution as soon as possible. We apologize for the inconvenience and thank you for your patience.

In case you’re facing internet restrictions on your Windows device, you can solve the internet restrictions by using the NordVPN NordLynx protocol. Follow the steps below to get started:

  1. Download the NordVPN application.

  2. Go into the settings menu of the NordVPN app:

    Settings button.png

  3. Click connection:

    Connection.png
  4. Click the VPN protocol drop-down:

    VPN protocol.png

  5. Switch to the NordLynx protocol:

    NordLync.png

  6. Return to the main screen and press quick connect.

    Quick connect.png

 

You should now be able to connect.

Avoiding local internet restrictions on macOS

 

To bypass internet restrictions on your macOS device, you can set up an IKEv2 VPN connection. To get started, follow the steps below: 

  1. Download the NordVPN IKEv2 certificate to your Mac.

  2. Click on the downloads folder.

    1 (1).png

  3. Open root.der

    1 (1) (1).png

  4. Click add to add the certificate to the login keychain.

    Add certificates.svg

  5.  Right-click the NordVPN Root CA certificate in the login keychain, and select get info.

    5TgV2QvkW8.svg

  6. Under when using this certificate, find extensible authentication (EAP) and IP Security (IPsec) and select always trust for both. 

    NordVPN certificate.png
    You will have to enter your mac password to make these changes.
  7. Click on the Apple icon in the upper left-hand corner of the screen, and select system preferences.

    MacOSxL2TP1.png

  8. In system preferences, click the network icon.

    System preferences (1).png

  9. Click the + icon in the lower left-hand corner of the screen.
    You must have administrator privileges.

    Network +.png

  10. From the interface dropdown list, select VPN.

  11. For VPN type select IKEv2.
  12. Input a name for the service name field, once done, click create.

    Nordbpm.png

  13. The settings for the new VPN connection will now be displayed.
    In the server address field, enter the IP from the list below.

    In the remote ID field, enter NordVPN's server domain name from the same list:

 

Server Address:   Remote ID: 
178.79.177.90
 - 
uk2326.nordvpn.com
 
178.79.177.195
 - 
uk2326.nordvpn.com
 
178.79.177.150
 - 
uk2326.nordvpn.com
 
212.71.235.149
 - 
uk2326.nordvpn.com
 
212.71.235.93
 - 
uk2326.nordvpn.com
 
173.255.216.165
 - 
us5783.nordvpn.com
 
172.104.115.248
 - 
 jp598.nordvpn.com
 
172.104.115.220
 - 
 jp599.nordvpn.com
 
172.104.115.82
 - 
 jp598.nordvpn.com
 
172.104.115.26
 - 
 jp598.nordvpn.com
 
172.104.115.47
 - 
 jp599.nordvpn.com


Example:

ycbHHCc.png

  1. Click authentication settings
  2. Select username as the authentication method.

  3. Enter your NordVPN service username and service password. Click ok and apply.

    Authentication Settings.png

    You can find your NordVPN service credentials (service username and service password) in the Nord Account dashboard:

  4. Click NordVPN.

    NordVPN tab.png

  5. Select set up NordVPN manually.

    Set up NordVPN manually (1).png
     
  6. You will receive a verification code in your registered email.  

    2 (2).png
     
  7. Copy the credentials using the buttons on the right.

    credentials.png
     
  8. Click connect and apply.

    mac3 _1_.svg


You will now be connected. If you’ve chosen to see the VPN status in the menu bar, you can control your VPN connection from there. 

mac4.svg

 

After completing the steps, your macOS device should be connected successfully.

Avoiding local internet restrictions on Android

 

If you are struggling with internet restrictions on your Android device, you can bypass them by using Obfuscated servers. Follow the steps below to get started:

  1. Download our application.

  2. Switch to Open VPN (TCP).

  3. Go to to specialty servers tab:

    Specialty servers.png

  4. Connect to obfuscated servers:

    Obfuscated.png

 

Once you have completed the steps, your device will be connected to the obfuscated servers.

Avoiding local internet restrictions on Android - IKEv2

 

You can bypass internet restrictions on your Android device by using the IKEv2 protocol. Follow the steps below to get started:

Firstly, download the NordVPN IKEv2 connection certificate.

Next up, you'll need a server hostname to connect to. Follow the steps below to find the best server for your connection:

  1. Log into your Nord Account, and click NordVPN.

    NordVPN tab (1).png

  2. Scroll down to advanced settings and click set up NordVPN manually.

    Set up NordVPN manually (2).png

  3. Select the Server recommendation tab. According to your location, the best server will be recommended.

    Get setup configuration.png

  4. By pressing advanced filters you can further customize the recommended servers by selecting the server type and the security protocol.

    Advanced filters.png

  5. Under the server IP, next to available protocols, select IKEv2/IPSec.



  6. In the window that pops up, copy the server hostname and use it in your IKEv2 manual connection setup.

    Copy hostname.png

  7. When connecting to IKEv2 manually, you're going to need to use the username and password from the service credential tab.

    credentials (1).png

  1. Download and install the strongSwan VPN Client from the Play Store or directly from us.

  2. Open the strongSwan application.

  3. Tap on the three-dot icon in the top-right corner of the app and select CA certificates from the drop-down menu.

    CA certificates.png

  4. Tap on the three-dot icon again and select import certificate.

    Import certificate.png

  5. Select the root.der file you downloaded in the first step.

    R3G0Yos1o9.png

  6. Confirm by tapping import certificate.

    Import certificate (1).png

  7. Tap the left-pointing arrow to go back to the main screen of the strongSwan app.

  8. Select add VPN profile.

    Add VPN profile.png

  9. Now you'll have to fill out several fields, starting with the one labeled server.

    servers (2).png

  10. Enter a server IP address from the list below. You'll need the server hostname later on in the tutorial:

    66.175.217.239 - us5783.nordvpn.com
    74.207.240.34 - us5783.nordvpn.com
    74.207.240.173 - us5783.nordvpn.com
    74.207.252.8 - us5783.nordvpn.com
    74.207.252.88 - us5783.nordvpn.com
    139.162.124.92 - jp598.nordvpn.com
    139.162.124.101 - jp598.nordvpn.com
    139.162.124.107 - jp598.nordvpn.com
    139.162.124.113 - jp598.nordvpn.com
    139.162.124.114 - jp598.nordvpn.com


  11. Enter your NordVPN service credentials in the username and password fields.

    servers (1).png

  12. Click on show advanced settings.

    Show advanced settings.png

    In the new field server identity enter the hostname that stood next to the IP address that you chose in step 16.

    Screenshot_2021-04-21-15-31-11-235_org.strongswan.android.png

    Once you have entered all the information, click save.

  1. To connect, tap the profile you have just created.

    serverss.png

  2. The application will ask you for the permissions necessary for the VPN connection. Click ok.
    Note: Different devices may display slightly different warning messages.

    Z6NjWxXoSD.png

 

Once you see a status saying you are connected, you have successfully connected to the VPN server. You can now minimize the application and use your device as usual – all of your internet traffic is now secure and goes through a VPN.
Tap disconnect to disconnect from the server.

Avoiding local internet restrictions on iOS

If you are encountering internet restrictions on your iOS device, you can bypass them by setting up an IKEv2 connection. Follow along to the steps below to get started:

  1. Download the NordVPN IKEv2 certificate to your device.

  2. Tap install in each of the steps:

    Install profile (1).png

    Group 2 (13).png
     
  3. Tap done to complete the installation.

    Profile installed done.png

    In the iOS 12.2 version and above, after you download the certificate, you might see a pop-up saying: "Profile downloaded. Review the profile in Settings app if you want to install it."

    VihtdXN86J (1).png

  4. Go to your iOS settings.
  5. Tap profile downloaded.

  6. Go to NordVPN Root CA.
  7. Tap install.

  8. Tap trust.

  9. If you cannot see the profile downloaded option, go to settings.
  10. Tap general.
  11. Select profiles. You should find the downloaded profile there.

    Group 1 (30).png
     
  12. Open Settings.
  13. Select general.

  14. Tap VPN.

    General VPN (1).png
     
  15. Tap add VPN configuration.

    Add VPN Configuration.png

  16. Complete the fields as follows:

    Type: IKEv2
    Description: Any preferred name for the VPN connection
    Server: server IP from the list below
    Remote ID: server hostname from the list below
    Local ID: Leave empty
    User Authentication: Username
    Username: Your NordVPN service credentials 
    Password: Your NordVPN service password
    Proxy: Off

    You can find your NordVPN service credentials (username and password) through the Nord Account dashboard:

    1. Go to the menu bar:

      Nord Account settings button.png
       
    2. Click NordVPN.

      NordAccount NordVPN.png
       
    3. Scroll down and click Set up NordVPN manually​​​​​​.

      Set up nordvpn manually (3).png

    4. You will receive a verification code in your registered email. Type the code in: 

      actual_4 (4).png
       
    5. Copy the credentials using the copy button below.

      copy copy (5).png

    6. IP and hostname list:

      178.79.177.90 - uk2326.nordvpn.com
      178.79.177.195 - uk2326.nordvpn.com
      178.79.177.150 - uk2326.nordvpn.com
      212.71.235.149 - uk2326.nordvpn.com
      212.71.235.93 - uk2326.nordvpn.com
      173.255.216.165 - us5783.nordvpn.com
      172.104.115.248 - jp598.nordvpn.com
      172.104.115.220 - jp599.nordvpn.com
      172.104.115.82 - jp598.nordvpn.com
      172.104.115.26 - jp598.nordvpn.com
      172.104.115.47 - jp599.nordvpn.com


      otsJv7E00U.png

      Tap done.

    7. Go back to the settings menu of the device and tap the toggle switch next to VPN to enable the VPN connection.

      Settings VPN.png

After completing the steps, your NordVPN connection will be enabled successfully.

Avoiding local internet restrictions on strongSwan

 

In this guide you will learn how to bypass local internet restrictions on strongSwan, follow the steps below to begin:

  1. Make sure you have all the required dependencies on your device. To do this, run the following command:

    sudo apt-get update && sudo apt-get upgrade


  2. Next, get the following packages:

    sudo apt-get install strongswan libcharon-extra-plugins libcharon-standard-plugins
    Note: For Arch-based distributions and others, you might not have libcharon packages, as they are in the strongswan package.

    In this case, run:

    pacman -S strongswan


  3. Open ipsec.secrets 
    Note: copy-pasting the command may lead to issues. It would be best to type out by hand).

     
    sudo nano /etc/ipsec.secrets​

    VirtualBoxVM_HPASkZ9Kla.png
     
  4. Now, change the fields username and your password for your NordVPN username and password as found below.

  5. Click NordVPN in the Nord Account dashboard:

    NordVPN tab (2).png

  6. Select set up NordVPN manually.
     
    Set up NordVPN manually (4).png

  7. You will receive a verification code in your email that you use for NordVPN services. Type the code in: 

    verify your email.png
     
  8. Copy the credentials using the copy buttons on the right:

    credentials (2).png
     
  9. Your password must be wrapped inside double-quotes. Also, make sure to have a space between username, :, and EAP.

    To save the changes, press CTRL+O, and then exit nano editor by pressing     CTRL+X.

    VirtualBoxVM_HPASkZ9Kla.png

  10. Once again, use the preferred text editor to enter /etc/ipsec.conf file. Do not forget root privileges since the file is write-protected from anyone except root.

    sudo nano /etc/ipsec.conf


  11. Copy-paste this into the config:

    conn NordVPN
    keyexchange=ikev2
    dpdaction=clear
    dpddelay=300s
    eap_identity="USERNAME"
    leftauth=eap-mschapv2
    left=%defaultroute
    leftsourceip=%config
    right=SERVER_IP
    rightauth=pubkey
    rightsubnet=0.0.0.0/0
    rightid=%SERVER_HOSTNAME
    rightca=/etc/ipsec.d/cacerts/NordVPN.pem
    type=tunnel
    auto=add

    image__7_.png

  12. Change USERNAME to your NordVPN service username from step 9, SERVER_IP to the IP from the list of servers below, for example 172.105.20.56, and SERVER_HOSTNAME to the hostname of the server from the list below:

    178.79.177.90 - uk2326.nordvpn.com
    178.79.177.195 - uk2326.nordvpn.com
    178.79.177.150 - uk2326.nordvpn.com
    212.71.235.149 - uk2326.nordvpn.com
    212.71.235.93 - uk2326.nordvpn.com
    173.255.216.165 - us5783.nordvpn.com
    172.104.115.248 - jp598.nordvpn.com
    172.104.115.220 - jp599.nordvpn.com
    172.104.115.82 - jp598.nordvpn.com
    172.104.115.26 - jp598.nordvpn.com
    172.104.115.47 - jp599.nordvpn.com


  13. Enter /etc/strongswan.d/charon/constraints.conf file.

    sudo nano /etc/strongswan.d/charon/constraints.conf


  14. Inside the file, change load = yes to load = no. Download the NordVPN RSA certificate.

    sudo wget https://downloads.nordcdn.com/certificates/root.pem -O /etc/ipsec.d/cacerts/NordVPN.pem


  15. Now let’s restart ipsec in order to reload all configuration files.

    sudo ipsec restart
    If you’ve made any typos in /etc/ipsec.conf file you’ll be notified when the service will begin starting.
     

  16. After it’s done, you can connect by launching this command:

    sudo ipsec up NordVPN
    This command should show the output “Connection NordVPN has been established successfully”.


  17.  To disconnect, type:
    sudo ipsec down NordVPN

 

 

Changing the server:

  1. Edit the file /etc/ipsec.conf:

    sudo nano /etc/ipsec.conf


  2. Change the right and rightid fields with ones that correspond with a different server and save the file. For example:

    right=45.79.113.73
    rightid=us5733.nordvpn.com
  3. Run the commands:

    sudo ipsec restart
    sudo ipsec up NordVPN

 

Common errors and their solutions:

If you are receiving no config named 'NordVPN' error after running the ipsec up NordVPN command, please refer to our article regarding the Linux IKEv2 MSCHAPv2 fix.

If you are getting the error: Error "generating INFORMATIONAL request 4 [ N(AUTH_FAILED) ]".

Follow these steps:

  1. Run the command:

    sudo rm /etc/ipsec.sec*


  2. Create a new ipsec.secret file using the command:

    sudo nano /etc/ipsec.secrets​


  3. Enter the credentials as described in the step 4 of the main guide, and save the file.

  4. Run the commands:

    sudo ipsec restart
    sudo ipsec up NordVPN

After following the steps, your device should be connected succesfully.

Was this article helpful?
Thanks!

Related articles