This page walks through creating your first connection, connecting, and reading the connection screen. Everything else in these docs builds on it.
You need a SoftEther VPN Server to connect to — either your own, one shared with you by an administrator, or a public one from the VPN Gate list.
Create a connection profile
- Open Rammbock. On the configurations screen, tap New.
- Fill in the server details:
| Field | What to enter |
|---|---|
| Name (optional) | A label for your own use, e.g. Home server. If left blank, the host is shown instead. |
| Server host | The server’s hostname or IP address, e.g. vpn.example.com. |
| Port | The TCP port the server listens on. 443 is the common default. |
| Virtual hub | The name of the hub on the server you’re joining, e.g. VPN. Ask your administrator if unsure. |
| Authentication | How you prove who you are — see Authentication. The default is Password (username + password). |
- Tap Save.
Your new profile appears in the configurations list.
Where do these details come from? Your server administrator provides the host, port, hub name, and your credentials. If you were given a
.vpnfile or a QR code instead, you don’t need to type anything — see Import, export & QR sharing.
Connect
- Tap the profile in the list, then tap Connect.
- The first time you ever connect, Android asks permission to set up a VPN — tap OK. This is the standard Android VPN consent and only appears once.
- The status moves through Connecting… to Connected.
A key icon in the status bar shows Android’s VPN is active.
The connection screen
While connected, the profile card shows live information:
| Item | Meaning |
|---|---|
| Connected — address | The tunnel is up; the IP address is the one leased to you inside the VPN. |
| ↑ / ↓ traffic | Bytes sent and received over the tunnel. |
| Latency | Round‑trip time to the gateway, if connection‑quality monitoring is on. |
| Reserve link | Status of the standby session, if dual connection is on. |
The card’s buttons let you Pause, Resume, or Disconnect.
- Pause suspends the tunnel but keeps the profile “active” so you can resume quickly.
- Disconnect tears the tunnel down and restores normal networking.
If the screen says “Blocked”. That means the kill switch is active: the tunnel went down and all traffic is being blocked to prevent leaks. Reconnect to bring the tunnel back, or disconnect to restore normal networking.
Editing and deleting
- Edit a profile from its overflow (⋮) menu or by opening it — every option described in these docs lives in the editor.
- Delete removes the profile permanently, including any imported routing list attached to it.
Profiles are stored encrypted on the device (AES‑GCM with an Android Keystore key), so your saved credentials never sit on disk in the clear.
Next steps
- Not sure which sign‑in method to use? → Authentication
- Want to reach LAN devices, or worried about leaks? → Kill switch & LAN protection
- Only want some apps/sites through the VPN? → Split tunneling & routing
- On a flaky or restrictive network? → Connection resilience, Dual connection, or VPN over DNS