On your Android device, open "Settings", then the "Network "

Add a new VPN and give the connection a suitable name.

Select "IKEv2/IPSec RSA" as the VPN type.

"Server Address" is the externally accessible, official DNS name of your Intra2net system, as it must also be specified in the Intra2net system's certificate.

The value for "IPSec ID" is derived from the connection name on the Intra2net system. The value can be retrieved on the Intra2net system from the menu "System > Keys > Foreign Keys", option "IKE ID", and must match exactly on the Android device with the value on the Intra2net system.

For "IPSec user certificate", "IPSec CA certificate", and "IPSec server certificate", select the certificate that was previously imported to the Android device.

Save the connection.

Tap the connection name, and then establish the connection.

If the connection was established successfully, a key icon will appear at the top of the status bar.