Does ios vpn ondemand conflict with manual vpn?

I have an ios 7.1.2 device with a vpn configuration profile applied to force a IPSEC vpn on for all internet access. This works great - when ever I access a web page etc, the vpn springs into life.
However, if I go to Settings, VPN and manually switch the VPN OFF; and then manually switch the VPN back on again - the VPN no longer works properly:
-The VPN logo still appears at the top leftside, when the VPN is manually switched back on again
-However, when I go to a web page I get the message unable to connect to the internet.
-Specifically, I know that traffic is going to the vpn server, and the vpn server is returning traffic - but it appears the device is unable to handle it.
Has anyone else come across this use case?
I know that if having had the problem, I manually switch the vpn back OFF; and then go to a web page to trigger the vpn on demand - all is well.
So its as if there is a conflict between ondemand and manual vpn setting?
Has anyone else experienced this?
Is it a bug or a feature? Is there anything I can do to avoid it, or having used on demand - do I always have to trigger on demand and never manually?

I have this same question for IPSec on both iOS and MAC OS X. Does the built in iOS and MAC OS X VPN client's support IPSec VPN connections where the VPN server's public IPv6 address is used ? I am getting a server not found error when I try to get this working.

Similar Messages

Does Compressor 3.5 Conflict With FCE 4 And LiveType?

Last week my Compressor 3.5 app suddenly refused to open.
I tried all the usual remedies including deleting it with FCS Remover but to no avail.
Eventually it was cured by deleting all the FCS 3 apps and reinstalling.
This morning Compressor once again refused to open with the original "There is a problem . . . " error message.
Now I realised I had done something an hour before.
I had just installed FCE 4 and LiveType that comes with it.
I believe I had also done the same before last week's problem.
It looks as though there is something about the installing of FCE 4 and/or LiveType that Compressor 3.5 does not like.
I used FCS 2 together with FCE 4/LT for a couple of years with no apparent conflict.
I have got everything going again by deleting all the FCS 3 apps and reinstalling . . . . not FCE 4 and LT of course!
I'm wondering whether it is caused by both of them or just one . . . . maybe LT.
Perhaps installing FCE 4 and LT before installing FCS 3 would work?
I could find out by experimenting but I think I've done enough reinstalling!

Thanks Jon.
I felt it might be something to do with the older FCE/LT installing outdated shared assets.
A couple of hours ago I successfully installed LiveType without it affecting FCS 3.
I installed it on another Mac and then simply copied the application across. I figured that FCS 3 would probably have already installed any "hidden" files LT would need and I seem to have been proved correct.
I think it will probably work with FCE but I am not feeling quite brave enough today!

Does Aperture2.1.3 conflict with HD6.0.3?

Referencing my earlier query about incomplete imports (http://discussions.apple.com/thread.jspa?threadID=2014358&tstart=0), I've just had a perfect run of 20 minutes. And then I launched Aperture2.1.3 and instantly iMovieHD6.0.3 seized up. The clip dropped a few frames and then the process terminated.
Looks like I may have a conflict here. Anyone else recognise this or able to advise?
Many thanks,
Richard

Even though it may work in most cases, it is recommended that the SOA Server and jdev versions match.
I have seen problems during deployment with jdev 10.1.3.3 and soa suite 10.1.3.4, which was resolved when using jdev 10.1.3.4 and soa suite 10.1.3.4.
Regards,
Shanmu.

Why does Firefox 3.6 conflict with Adobe Flash Player 10.1?

I HAD MLB.TV running, but had to reboot the OS (XP Pro)
and now Adobe FP won't load.
What gives?

I just thought I would comment that I am using Windows XP Pro, and my FlashPLayer works ok. I am using Firefox v3.6.13 and the FlashPlayer is v10.1.102.64

Static Policy NAT in VPN conflicts with Static NAT

I have a situation where I need to create a site-to-site VPN between an ASA 5505 using IOS 7.2 and a Sonicwall NSA4500. The problem arises in that the LAN behind the Cisco ASA has the same subnet as a currently existing VPN created on the Sonicwall. Since the Sonicwall can't have two VPNs both going to the same subnet, the solution is to use policy NAT on the ASA so that to the Sonicwall, the new VPN appears to have a different subnet.
The current subnet behind the ASA is 192.168.10.0/24 (The Sonicwall already has a VPN created to a different client with that same subnet). I am trying to translate that to 192.168.24.0/24. The peer LAN (behind the Sonicwall) is 10.159.0.0/24. The pertinent configuration of the ASA is:
interface Vlan1
ip address 192.168.10.1 255.255.255.0
access-list outside_1_cryptomap extended permit ip 192.168.24.0 255.255.255.0 10.159.0.0 255.255.255.0
access-list VPN extended permit ip 192.168.10.0 255.255.255.0 10.159.0.0 255.255.255.0
static (inside,outside) 192.168.24.0 access-list VPN
crypto map outside_map 1 match address outside_1_cryptomap
In addition to this, there are other static NAT statements and their associated ACLs that allow certain traffic through the firewall to the server, e.g.:
static (inside,outside) tcp interface smtp SERVER smtp netmask 255.255.255.255
The problem is this: When I enter the static policy NAT statement, I get the message "Warning: real-address conflict with existing static" and then it refers to each of the static NAT statements that translate the outside address to the server. I thought about this, and it seemed to me that the problem was that the policy NAT statement needed to be the first NAT statement (it is last) so that it would be handled first and all traffic destined for the VPN tunnel to the Sonicwall (destination 10.159.0.0/24) would be correctly handled. If I left it as the last statement, then the other static NAT statements would prevent some traffic destined for the 10.159.0.0/24 network from being correctly routed through the VPN.
So I tried first to move my policy NAT statement up in the ASDM GUI. However, moving that statement was not permitted. Then I tried deleting the five static NAT statements that point to the server (one example is above) and then recreating them, hoping that would then move the policy NAT statement to the top. This also failed.
What am I missing?

Hi,
To be honest it should work in the way I mentioned. I am not sure why it would change the order of the NAT configurations. I have run into this situation on some ASA firewalls running the older software (older than 8.2) and the reordering of the configurations has always worked.
So I am not sure are we looking at some bug or what the problem is.
I was wondering if one solution would be to configure all of the Static NAT / Static PAT as Static Policy NAT/PAT
I have gotten a bit rusty on the older (8.2 and older) NAT configuration format as over 90% of our customer firewalls are running 8.3+ software.
I was thinking of this kind of "static" configuration for the existing Static PAT configurations if you want to try
access-list STATICPAT-SMTP permit tcp host eq smtp any
static (inside,outside) tcp interface smtp access-list STATICPAT-SMTP
access-list STATICPAT-HTTPS permit tcp host eq https any
static (inside,outside) tcp interface https access-list STATICPAT-HTTPS
access-list STATICPAT-RDP permit tcp host eq 3389 any
static (inside,outside) tcp interface 3389 access-list STATICPAT-RDP
access-list STATICPAT-TCP4125 permit tcp host eq 4125 any
static (inside,outside) tcp interface 4125 access-list STATICPAT-TCP4125
access-list STATICPAT-POP3 permit tcp host eq pop3 any
static (inside,outside) tcp interface pop3 access-list STATICPAT-POP3
Naturally you would add the Static Policy NAT for the VPN first.
Again I have to say that I am not 100% sure if this was is the correct format maybe you can test it with a single service that has a Static PAT. For example the Static PAT for RDP (TCP/3389). First entering the Static Policy NAT then removing the Static PAT and then entering the Static Policy PAT.
Remember that you should be able to test the translations with the "packet-tracer" command
For example
packet-tracer input outside tcp 1.1.1.1 12345
- Jouni

Bonjour conflicts with VPN

I have a Macbook Pro with Windows Vista installed on it. Vista has no problem printing to my Airport network through Bonjour. Where I run into a problem is when I am connected to work through a VPN on the Windows side. When I try to print something from work, the work printer, which is really a reference to my local network printer, creates a HobLink file. From everything that I can gather, this HobLink file is encrypted, and Bonjour has a conflict with it. So, in essence, if I establish a VPN with my office on the Windows side, I cannot print to anything. Does anyone know a work around to this HobLink/Bonjour conflict? Thanks.

I am not sure this is HobLink related. Do you use HobLink to connect to terminal servers at work? That's apparently what it's for: "HOBLink JWT is the time saving, cost-efficient and web-based answer for fast, multi-user access to centrally located Windows applications and data on Windows Terminal Servers from Apple Macintosh's OS X."
In general, Bonjour does not work over VPN connections because the Bonjour broadcast packets are not passed. I am not sure if this is a limitation of VPN or just the routers, which also do not pass Bonjour packets between subnets on a local network by default.
Update: I just found this informative discussion on MacOSXHints about this topic: http://www.macosxhints.com/article.php?story=20080626194901370

HT1338 Why does my VPN keep dropping out on my new MAC?!?! Could it be anything to do with the MTU settings?

Why does my VPN keep dropping out on my new MAC?!?! Could it be anything to do with the MTU settings?

I am having the same exact problem as you described I can't see your Screen Shot.
Try these methods.. they are supposed to work, but havent for me maybe your luck is different. http://osxdaily.com/2012/11/30/resolving-stubborn-wi-fi-connection-problems-in-m ac-os-x/t
If i go right next to my router the internet works fine but where I used to get 5 bars I get like none and if im lucky 1. Didnt' have this issue 2 - 3 days ago

Flash Player 10 does not work in IE or Firefox. What could it conflict with?

I'm using Firefox 3.6.8 (and sometimes IE 8.0.6001.18702IC) on Windows XP Pro, SP 3.
For some weeks now, I have been unable to hear any sounds on anything Flash-based, from YouTube to games at MSN.com or embedded videos on any site using Flash. Initially I had assumed it to be because of having QuickTime installed because I know QT likes to hijack everything. I uninstalled QT (and Real Player) and Flash Player then reinstalled Flash Player (and Shockwave Player just in case) and guess what?
Yup. Nothing. When I uninstalled everything, I used a program called Revo Uninstaller, which includes a registry cleaning option. I then used Abexo and WinASO's registry cleaners to make sure I got everything else that even looked like QuickTime off my hard drive.
When I reinstalled Flash, the following programs appeared in C:\Windows\system 32\Macromed\Flash:
Flash 10i.ocx (10.1.82.76)
FlashUtil10i_ActiveX (10.1.82.76)
FlashUntil10i_Plugin (10.1.82.76)
genuinst (6.0.2800.1531)
FlashUtil10i_ActiveX.dll (10.1.82.76)
NPSWF32.dll (10.1.82.76)
KB931433
FlashInstall
Install
Flashplayer.xpt
When I check IE's "Tools" and look for add-ons, it says that Flash (Shockwave Flash) is enabled. I even enabled the other Adobe add-ons for Acrobat and such just to be sure. Firefox shows Shockwave Flash and Shockwave for Director both to be enabled. The Flash control panel settings don't help: I have all sites set to store about 100 KB on my computer to make sure there's enough room for everything but still nothing.
Before anyone asks, my audio drivers are up to date, thanks to the manufacturer's website. I have DirectX 9.0c installed and everything else works fine. I can play audio and video elsewhere with no problems. It's only Flash that's showing me this trouble and there's no hint as to what else could be interfering with Flash.
Any ideas?

Well, great. I tried the uninstall/reinstall before, but not with the uninstaller, so I was hopeful that this time might do it. No such luck. The video still plays, but no sound.
All the sound settings are working with everything else from games to media players. I set Windows' firewall to allow both the ActiveX and plugin for Flash, just in case.
In the Flash folder, I now have:
Flash10l.ocx (10.1.102.64)
Flash Util10l_ActiveX (10.1.102.64)
FlashUtil10l_Plugin (10.1.102.64)
Genuinst (6.0.2800.1531)
FlashUtil10l_ActiveX.dll (10.1.102.64)
NPSWF32.dll (10.1.102.64)
And the setup and text files that went with 'em.
I've also done a system restart since then and zip.
I went through IE and Firefox and looked for any file associations (like .flv) that I could manually change over to using Flash, but no go. The settings panels for Flash have all been set to allow YouTube specifically (as a test) and to allow 10KB of storage space for all affected sites.
Now what? I'm really not looking forward to a reformat and reinstall, but it's looking like that's what it's going to take.
Date: Sun, 14 Nov 2010 17:37:07 -0700
From: [email protected]
To: [email protected]
Subject: Flash Player 10 does not work in IE or Firefox. What could it conflict with?
Something is strange with your list of modules; you list FlashUntil10i_Plugin (10.1.102.64), but this is really 10.1.85.3
I recommend that you uninstall Flash Player completely (using http://kb2.adobe.com/cps/141/tn_14157.html), then restart Windows, and delete all remaining files in C:\Windows\system32\Macromed\Flash.
Next reinstall both ActiveX (http://fpdownload.adobe.com/get/flashplayer/current/install_flash_player_ax.exe) and the plugin (http://fpdownload.adobe.com/get/flashplayer/current/install_flash_player.exe).
After that, if the problem persists, have a look at this page http://kb2.adobe.com/cps/837/cpsid_83739.html
>

Auto backlight does not work on 4S with iOS 7! With iOS 6.1.3 I had the same problem.Why?

Auto backlight does not work on 4S with iOS 7. I had the same problem with iOS 6.1.3! Why ?

rlwebb71 wrote:
... I have the latest generation iPod touch, not the 5, but the latest. So why can't Siri come out and play?
Siri is not a feature of that iPod... 4th Gen...
iOS 6 Which Software for Which iDevices...
http://support.apple.com/kb/HT5457

The version of iOS on does not match any of the versions of iOS supported for development with this installation of the iOS SDK

Getting this error message as of this morning: The version of iOS on “iPad” does not match any of the versions of iOS supported for development with this installation of the iOS SDK. Please restore the device to a version of the OS listed below, or update to the latest version of the iOS SDK. I've downloaded the latest SDK and gone through the usual turn off and turn on again for iPad and computer, removed and reinstalled the iPad from Organizer and have no idea how to make apps build now. I was prompted to update the iphone too but there's no way I'm updating it if this issue can't be resolved.

Okay these are the steps I took to solve the problem - they may not be the right ones for you but they've solved the problem and saved time hunting for some other solution. Firstly I changed my MAC system to Lion with the £20 download, then I deleted the old Xcode and installed the new version that is app based and doesn't support Snow Leopard, then all was well. I can now update my xcode via the app which is quicker and more logical and can update my iPhone rather than chug along avoiding updates as I need to update my existing apps on the app store and upload a new one.

TS3366 iOS 7: Back and Forward Gesture in Safari and Mail conflicts with Panning Gesture

Back and Forward Gesture in Safari and Mail is different than the back and forward gesture used to swipe between Home screens. The simple swipe with the thumb straight does not work in Safari and Mail, it conflicts with the Panning gesture. It should be relatively easy to improve the algorithm to allow for that gesture to work.

Indeed, swiping back from pdf pages sometimes works, but most often does not.
It seems that the swiping gesture has in all cases changed slightly. It is now necessary to swipe a little until a portion of the previous page is uncovered, and only then can one swipe back.
The fact that there is a specific way to swipe back from html pages suggests that there might be an equally specific way to swipe back from pdf pages. I am still experimenting. Meanwhile make sure no one is sitting to your right in case your trackpad flies off during a gesture trial.

IOS Sdk does not seem to download with Xcode. I am using Mac OS X Lion 10.7.3. Why not?

The IOS SDK does not seem to download with XCode. There is no IOS template in XCode. I am using
Mac OS X Lion 10.7.3 on a Mac mini. Do you have to pay $99 to get this?

Another similar one here. I've updated ios7 and usb tethering doesn't work. I use it at my office connecting to a XP machine. It connects, iphone asks me to 'trust' the computer (which I do) and the driver is installed. However the connection shows a status of 'LAN Cable disconnected'.
However the version of itunes on the machine is a versions back (I don't use itunes on that machine).
Because the usb tethering is a universal network driver connection then it should still work on any machine even if there is no itunes installed (i.e. as long as hotspot is enabled).
looking at other forums it appears this is very much ios7 related. Was working perfectly on ios6.

HT204150 Does iOS 6 allow you to browse groups? I could do it before with iOS 5 on my 4S. Now I can't.

Does iOS 6 allow you to browse groups? I could do it before with iOS 5 on my 4S. Now I can't.

If you check all the groups then you will see the combined contacts in all of the groups. If you want to see (browse) the contacts in, for example, just one group, only check this one group and tap done. If you check two groups and tap Done you will see the combined contacts belonging to these two groups.
Try checking a single group and uncheck all others, tap Done and you'll see what I mean.

This is an message when I open up CS4 in Illustrator. "Some plugins in additional plugins folder are conflicting with application or user plugins. It will skip loading plugins from additional plug-ins folder? What does this mean and how can I fix it.

This is an message when I open up CS4 in Illustrator. "Some plugins in additional plugins folder are conflicting with application or user plugins. It will skip loading plugins from additional plug-ins folder? What does this mean and how can I fix it?

Thanks Larry. I thought so. I will do this weekend. Again, I appreciate your help.
Trying to get updated software – I am not a fan of the cloud stuff. Nothing I can do about it.
Thanks again Larry!

Does ios 7.1 contain a carrier update for Meteor in Ireland? I haven't taken the latest update as I don't want to lose my 3G on/off button (which will be replaced with a 4G switch).

Does ios 7.1 contain a carrier update for Meteor in Ireland? I haven't taken the latest update as I don't want to lose my 3G on/off button (which will be replaced with a 4G switch).

Yes, I know... I discovered now that I have saved the photos I wanted from it long time ago (for the same reasons, i didn't wanted to lose them). So I'm kind of saved. Also it has been like crap because the laptop where I had my backups is as dead as can be. That was the moment when I panicked. From now on... I'll back-up it everyday. Thank you a lot!

Does ios vpn ondemand conflict with manual vpn?

Similar Messages

Maybe you are looking for