IPhone VPN

Alright, so here is the deal, can anyone tell me if Apple plans to solve this VPN disconnect issue when the iPhone goes into "sleep mode"? In order for my e-mail to get to my phone by Push or Fetch, I have to have a VPN established and the darn things disconnects EVERY time sleep mode turns on. I know it will have to do re-establish my VPN when I get and make a call, but I am looking for a program to do an auto-reconnect or something. Anyone else have this problem and/or figured out a solution? Thanks.

The funny thing is WiFi does exactly what we need VPN to do in sleep mode. The second the phone wakes up, WiFi tries to re-establish itself and does so quickly. I REALLY need to have them address this in 2.1 if possible.

Similar Messages

Configuring iPhone VPN with other gateway appliances

Dear Guru,
I'm just wondering if iPhone VPN client can be configured to work with other gateway appliances like Juniper, Netgear, SonicWall, and/or WatchGuard that support IPSec, LT2P, P2P because so far I only hear the most about Cisco gateway appliance. If it supports other appliances, can you help to elaborate how it can be configured for example with WatchGuard, or others.
Your inputs/comments are very much appreciated.
Thank you.
Regards,
Phyrom

I am in the same situation. The Netgear forums say the iPhone is CISCO only. Any help to get iPhone VPN connected to fvs318?

Anyone get iPhone VPN to work?

I've been able to successfully configure the iPhone's VPN so that it connects to my corporate VPN, but it won't pass any network traffic. I've tried to use my corporate mail account, intranet web sites (both by fqdn hostname and ip address) and no tcp/ip traffic is passed.
I have the very same username/password PPTP+MSCHAPv2 based VPN connection on my iMac at home and it works just fine.
Any ideas?
macbook pro Mac OS X (10.4.10)

I was having similar problems where were resolved by changing the encryption setting (which is bugged).
For more info check out this thread...
http://discussions.apple.com/thread.jspa?threadID=1018007&tstart=15
PowerMac Mac OS X (10.4.8)

IPhone, VPN and 'data roaming' (UK)

I had great difficulty setting up a VPN link to my university server. Even with identical settings to those on my laptop(s) the iPhone persistently produced the immediate message 'the server does not exist' (Oh! yes it does!). This applied on the EDGE, and more than one WiFi network. (And of course I checked the name very carefully!)
Anyone else with similar problems might like to know that I have solved this, for reasons I am unclear about, by:-
1 - substituting the (hopefully static) numeric IP address for the VPN server name
2 - turning 'on' Data Roaming (default being off)
Neither of these two measures works on their own but the combination works fine. Whilst the first might be easily explained by some DNS issue I do not see why the second measure is necessary, and there are dark warnings about charges in the handbook. What is 'data roaming' and why should it make a difference even when logged into the phone's home network?
Comments appreciated!

When you are outside the normal O2-UK coverage zone (i.e., in another country), then the phone is "Roaming". The Data Roaming switch can be used to control whether the iPhone tried to make a GPRS/EDGE data connection when the phone is roaming. I.e., when your phone is connected to a non-02 network.
If you are in the UK and connected to 02 while trying to connect to your VPN server, then you should not need to turn Data Roaming on. However, if you are trying to connect to your VPN server whilst outside the UK, then I would expect you to need to turn on Data Roaming (unless you are using WiFi)
Hope that clear things up.

RV220W and iPhone VPN IPSec

Hello there,
I currently have RV042 and I can VPN (pptp though) to it with no prob. I'm considering upgrading to one of these new routers that Cisco has recently brough out.
Before I bit the bullet, I wonder whether this new model is iphone fully ipsec compatible because as of now I just can't use ipsec but pptp.
Thanks

Hi there,
I currently own a rv042 and have no problems to VPN into my network. I've configured the router as a PPTP server and my iPhone connects just fine currently, but I'm looking for an alternative cause the VPN throughput in that scenario is extremely poor. Although there is no reference to max PPTP VPN throughput on the datasheet of the rv042, I had expected it to be similar to IPsec throughput which is detailed on that datasheet.
I even created a case and haven't received, to my opinion l, proper support from Cisco. Well, whatever... Don't want to continue as this would be off topic...
I started this thread because I wanted to know if this new device implemented enterprise IPSec VPN or SOHO IPSec VPN (and yes that also surprises me because I thought VPN was standard...). It makes me angry to find out that there seems to be two flavours of IPSec. This defeats the whole idea of a standard, doesn't it?
Please, can anybody with the rv220w confirm whether or not it features pptp VPN server support, and if iOS devices can stablish a PPTP VPN with it?
I'm just analysing this new device before I purchase it and find out again that I does not fulfil my expectations.
Thanks
Sent from Cisco Technical Support iPhone App

IPhone VPN client issues

1. Even if you key in a password for the VPN client, putting the phone to sleep will cause the password to be cleared, requiring you to retype it the next time you start the client.
2. the only place to type alphanumerics in for the password is on the VPN setup screen, if you just slide the VPN switch to On, you are presented with a numbers only dial pad
3. The PPTP VPN client only recognizes maximum security, setting to either automatic or none will just hop back to maximum on save.
4. The network stack doesn't allow you to easily set up special DNS servers for the VPN connection (the equivalent under OS X is to go into System Preferences, Network and select the VPN (PPTP) adapter and enter the DNS information there.
Since we use VPN to secure our wireless network, that means our iPhone users are unable to use WiFi at the office.
iPhone Windows XP
Dell Optiplex GX620 Windows 2000
iPhone Windows 2000

Scott,
You're correct (mostly). I've experienced the same issues and have tried to work around them as follows:
1) Use a numeric password for the VPN user account. Of course, you'll have to enter it each time (did they even test this?) but at least it works.
4) Depending on your VPN device you should be able to set the DNS addresses via that. I'm using a Cisco ASA and set the DNS via the Group Policy for the DefaultRAGroup.
The bottom line? iPhone and VPN are not friends. Moreover, the iPhone has no EAP support wireless authentication. I'm a huge Apple fan but that is just stupid.

Need help with iPhone VPN non-ASA

I am a network hobbiest. I am trying to set up my home router so my family can VPN to the house with our iphnones and ipads. I have tried to figure this out several times on my own and and for some reason I can not get the policies to match.
At this point I am looking to start from scratch as my current config is pretty sloppy from trying many different methods.
Here is my setup
[cable modem] <==> [c1841] <==> [8 port switch]
Cisco IOS Software, 1841 Software (C1841-ADVSECURITYK9-M), Version 15.1(4)M, RELEASE SOFTWARE (fc1)
So I am using NAT, and I do want to have 3-4 external devices able to conect to the VPN and without a static IP on the roaming end. The 1841 does have a static IP.
I am looking for the method that will work best in this setup.
Thanks.
Bryan

Ok, I have set my mac up to connect to the VPN using straight cisco ipsec in my system prefs.
This is a small section of the debug log from the 1841.
.Sep 20 12:22:13.517 EDT: ISAKMP:(0):Checking ISAKMP transform 5 against priority 4 policy
.Sep 20 12:22:13.517 EDT: ISAKMP:      life type in seconds
.Sep 20 12:22:13.517 EDT: ISAKMP:      life duration (basic) of 3600
.Sep 20 12:22:13.517 EDT: ISAKMP:      encryption 3DES-CBC
.Sep 20 12:22:13.517 EDT: ISAKMP:      auth XAUTHInitPreShared
.Sep 20 12:22:13.517 EDT: ISAKMP:      hash SHA
.Sep 20 12:22:13.517 EDT: ISAKMP:      default group 2
.Sep 20 12:22:13.517 EDT: ISAKMP:(0):Xauth authentication by pre-shared key offered but does not match policy!
At that point the encryption seems to match but something else is not. I have double and tripple checked that the pre-shared key is exact on both ends.

Cisco ASA 5505 VPN with iPhone

Hello Everyone. I am a newbie to the Cisco appliances, so please bear with me. I am trying to configure this unit to allow iPhone VPN access to our network to sync LOTUS DOMINO (Not Exchange) user's Email, Contacts, and Calendar. We have a Sonicwall NSA 2400 that is our main router, so the ASA will only be used for VPN access, not routing. It will be in the DMZ providing VPN access for the iPhones. With the VPN connected, we need to limit access to only those services required by the iphone to sync information. The Software version on the Cisco is 7.2(4). If there is anyone that could help me out, I would greatly appreciate it. Please remember I am new to this, so please be patient. Where do I begin? I hope to hear from anyone soon.

Hi,
I cannot help you with the Cisco side of the equation, but do you know about Lotus Traveler? It's free from IBM and essentially adds ActiveSync support to your Domino email environment. The iPhone is configured with an Exchange ActiveSync account and pointed to the Lotus Traveler server (which sits in your DMZ and only needs port 80/443 access). It gives you full push email/contacts/calendar (Blackberry-like) functionality.
Like I said, it's a free add-on from IBM Lotus for all licensed Domino users.

IPhone and MS Exchange - What works and what doesn't?

Along with many other users, I have been struggling with the issue of getting email to work correctly with MS Exchange and the iPhone. Since I have been working with the iPhone since the day it came out, I thought I would post a few successes so others can get a definitive answer on what is actually working so far. Note, I have been testing this only with Exchange 2003 server and I understand that there are reported issues using Exchange 2007. More info here: http://www.eweek.com/article2/0,1895,2152500,00.asp
• Exchange works fine with the iPhone to send and receive email if the Exchange Server is setup to use IMAP email. This is the only way to get to the server natively from the iPhone. Remember, the server has to be available through the firewall or you may have to use the iPhone VPN service to get to the server. Ask your Admin for the correct settings. Many Admins lock down all common ports and the only way in is through the VPN.
• No IMAP, no email? - Well, there are many other ways to get your email if the Admin is unwilling to setup IMAP on the Exchange Server. I won't go into all of them but here are a few ways to get your mail.
- Synchronica Mobile Gateway - www.synchronica.com. They offer a 60-day free evaluation that now supports the iPhone. Essentially it gets your email using Outlook Web Access (OWA) and you access the mail through their service. I have used it and can confirm that it does work. A little slow, but works. Not sure what the cost will be when it free part ends.
- Forward your email. Forward your exchange mail to another service. You can always have your exchange mail forwarded to a service such as Yahoo or Gmail and get the mail from there. Not the best scenario but once again, you are getting your email.
- Use OWA from the iPhone browser. Not ideal, but it does work. Along with seeing you calendars and contacts.
• Email is the only thing that works. There is no syncing with Exchange calendars or address books, other than using Apples iTunes syncing locally with your apps. Meaning you have to manually sync with the iPhone cable attached to your computer every time you sync. However I am able to view all my public folders and access the emails in them. The RSS feeds in Public folders work as well, however no calendar or address book public folders work.
• Emails don't delete from Exchange when I delete using the iPhone. This is the most frustrating issue I have with the iPhone. Apparently when you delete a message on the iPhone it is only marked for deletion on the Exchange Server. This means that until the deleted message actually receives the IMAP command to purge all messages marked for deletion, the message continues to appear on your Outlook, Apple mail, Entourage or other mail client. So you end up having to delete it twice. This is a real pain when you get back to your desktop machine and you see all the messages you already deleted from your iPhone and you either have to delete them again or use the Purge command. Luckily the folks at freshlogicstudios.com have released a free command line app called Expunge that does the dirty work for you. Read about it here: http://blogs.freshlogicstudios.com/
Just run this little app on a PC and it will delete the messages marked for deletion for you, essentially making the iPhone work as it should. If you are using a PC you can have this app run in the background. If you are using a Mac like me, I have it running on one of our servers at work. I know not everyone has this luxury, but you could run it on a home PC or ask your IT person nicely if they have a machine it could run on. Not the best solution but definitely welcome until Apple fixes this annoying issue. One note, this app requires the .Net Framework to be installed on the PC. Get it here: http://www.microsoft.com/downloads/details.aspx?FamilyID=0856EACB-4362-4B0D-8EDD -AAB15C5E04F5&displaylang=en
• The iPhone is not a business phone. I am so tired of hearing this. I travel frequently and use the iPhone for all my business email, scheduling and phone calls. I've used the Blackberry, the Treo and the Blackjack phones in the past and honestly don't understand the attraction. After using the iPhone for the last two months there is no way I could go back. In my opinion, the browser, the keyboard and general ease of use just blows these other phones away. With just a few added features this would be the ultimate business phone.
Hope this helps somebody.
Come on Apple, please license Active Sync!!!

K. Scott Myers wrote:
Forgot to mention...
Setting up Exchange support of your iPhone. At first with iPhone software version 1.0, Apple didn't have the Exchange settings quite right. If you selected the Exchange mail setting, you were unable to see any of the Public Folders and your subfolders appeared within the Inbox on your desktop mail client. Many people would setup their account using the standard IMAP email setting on the iPhone which corrected this. Apple fixed this with the 1.0.1 update release. Now you can use the Exchange email setting and it works as it should.
Well, it doesn't work for me as it should. If I configure the account as an EXCHANGE account most messages don't download. Instead, I get the message "Loading message" if I try to open a message. Then it just sits with "Loading message" displayed forever. If I reconfigure the account as IMAP I don't have this problem.
best,
Larry
Message was edited by: Lawrence Finch

How to configure Cisco ASA 5500 to work with the iPhone

We have Cisco ASA 5510 (latest firmware version), and apparently, according to Cisco website it is compatible with new iPhone 3G's IPSec client:
http://www.cisco.com/en/US/docs/security/vpnclient/cisco_vpnclient/iPhone/2.0/connectivity/guide/iphone.html
We've setup our first iPhone properly. It connects fine to the network, shows VPN connection as active. Gets a private IP address. But does not let any traffic go to the internal network. We thought it might be DNS problem, but it cannot connect to Exchange server even when using IP address instead of DNS. No luck either.
After checking ASA logs, we found that iPhone goes through Phase 1 authentication correctly. But then gives some kind of error, mentioning "Attribute 5".
Has anybody been successful configuring ASA5500 series (in particular 5510) to be used with iPhone?
I noticed that many people are having these problems.
Please do not post to this topic if you have ANY OTHER Cisco device.
Cisco specifies that iPhone is compatible only with Cisco ASA 5500 Security Appliances and PIX Firewalls. Neither Cisco IOS VPN routers nor the VPN 3000 Series Concentrators support the iPhone VPN capabilities.
Let's keep this topic only for users of ASA 5500 series and PIX Firewalls.
It would be extremely helpful for a large number of users if somebody posted a list of settings for ASA5500 or PIX firewall that DO work with iPhone 2.0
Thank you!
Oleg R

We found the solution and a bug in Cisco firmware (seems to be a bug).
First of all, thanks to our Chief Systems Architect Seb, here is a config that worked for us on a Cisco 5520 (latest firmware).
access-list iphone_splitTunnelAcl standard permit <insert ip> <insert mask>
access-list iphone_splitTunnelAcl standard permit <insert ip> <insert mask>
crypto ipsec transform-set ESP-AES-256-MD5 esp-aes-256 esp-md5-hmac
crypto ipsec transform-set ESP-DES-SHA esp-des esp-sha-hmac
crypto ipsec transform-set ESP-DES-MD5 esp-des esp-md5-hmac
crypto ipsec transform-set ESP-AES-192-MD5 esp-aes-192 esp-md5-hmac
crypto ipsec transform-set ESP-3DES-MD5 esp-3des esp-md5-hmac
crypto ipsec transform-set ESP-AES-256-SHA esp-aes-256 esp-sha-hmac
crypto ipsec transform-set ESP-AES-128-SHA esp-aes esp-sha-hmac
crypto ipsec transform-set ESP-AES-192-SHA esp-aes-192 esp-sha-hmac
crypto ipsec transform-set ESP-AES-128-MD5 esp-aes esp-md5-hmac
crypto ipsec transform-set iphone esp-3des esp-sha-hmac
crypto ipsec transform-set iphone mode transport
crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
crypto dynamic-map SYSTEMDEFAULT_CRYPTOMAP 65535 set pfs
crypto dynamic-map SYSTEMDEFAULT_CRYPTOMAP 65535 set transform-set ESP-AES-128-SHA ESP-AES-128-MD5 ESP-AES-192-SHA ESP-AES-192-MD5 ESP-AES-256-SHA ESP-AES-256-MD5 ESP-3DES-SHA ESP-3DES-MD5 ESP-DES-SHA ESP-DES-MD5 iphone
crypto map outside_map 10 match address vpn
crypto map outside_map 10 set transform-set ESP-AES-256-SHA
crypto map outside_map 65535 ipsec-isakmp dynamic SYSTEMDEFAULT_CRYPTOMAP
crypto map outside_map interface outside
crypto isakmp enable outside
crypto isakmp policy 10
authentication pre-share
encryption 3des
hash sha
group 2
lifetime 86400
crypto isakmp policy 20
authentication pre-share
encryption aes-256
hash sha
group 5
lifetime 86400
crypto isakmp nat-traversal 20
group-policy iphone internal
group-policy iphone attributes
wins-server value <insert ip> <insert ip>
dns-server value <insert ip> <insert ip>
vpn-tunnel-protocol IPSec
ipsec-udp enable
ipsec-udp-port 10000
split-tunnel-policy tunnelspecified
split-tunnel-network-list value iphone_splitTunnelAcl
default-domain value <insert domain name>
tunnel-group iphone type remote-access
tunnel-group iphone general-attributes
address-pool VPN-Pool
authentication-server-group ActiveDirectory2
default-group-policy iphone
tunnel-group iphone ipsec-attributes
pre-shared-key <insert pre-shared key>
For iPhone you have to be using IPSec tab for configuration.
We tried to set up this config using the wizards, but it would not work.
Later it turned out that wizards by default set this setting:
"crypto isakmp nat-traversal 20"
equal to zero and there is no way to change it from the GUI.
Only after we changed it (increased the value from 0 to 20) through the command line the connection started working perfectly.
Please let me know how it works out for you.
Message was edited by: Rogik
Message was edited by: Rogik

I don't want my child to be able to defeat VPN. Can I hide this setting? or can I PW protect it?

iPhones are not easy to use effective content filters. OpenDNS and other similar solutions can control content coming in from wi-fi.   However, the cellular phone companies don't provide the predicatable contol or access to their DNS function.     OpenDNS has a new program called Umbrella.   Targeted at large corporations to solve a multitude of issues, they also make this expensive program available for $20 for single iphone users.    It works great on both wi-fi and ATT data (in my case.)    However, it can be defeated by simply turning of VPN services.
I would like to find any of the following solutions.
1)   iphone VPN that cannot be switched off once enabled.
2)   Password protection for the VPN setting - (I think apple goofed by not providing this)
3)   The ability to "hide" the actual display of the VPN screen.
Any thoughts from the many with mightier minds than I?

There is nothing you can do...there are no apps like that unless you jailbreak your iPad.
Hope this helps you.

Forwarding L2TP to an internal Windows 2008 R2 VPN server behind RV042

Hi all,
we have a Cisco RV042 router and we wanted to use a Win 2k8 R2 VPN server that is located behind it to handle L2TP VPN connections.
I have forwarded Ports 500 and 4500 UDP and Port 1701 TCP and UDP to the VPN server, but I cannot establish a connection from my Windows 7 machine. I'm getting error 809 after a timeout.
It is working from the iPhone and the Mac without problems.
I have already set the parameter "AssumeUDPEncapsulationContextOnSendRule" to 2 in the registry of both the client and the server but with no effect.
My guess is that I cannot forward "IP Protocol 50" from the RV042 and that the iPhone VPN does not care about that but the Windows VPN does and so it's not working. Or is it possible that the active PPTP server on the RV042 could interfere here? It should be using different ports though.
Any idea how I could make this setup work?
Thanks
Regards,
Michael

This router is now supported on the Cisco forums since the sale of Linksys to Belkin. I had issues with L2TP with a different router. I just switched to PPTP instead. I've found PPTP much more forgiving between devices.
Please remember to Kudo those that help you.
Linksys
Communities Technical Support

VPN just stopped working again!!!

I have had VPN working fine both internally (without going through a router) and also from external Pcs and Macs. This was working fine, until came back into office after weekend and the server had dropped all connections including AFP. Rebooting the clients for the AFP resolved this side of things but the VPN service now has the error "The L2TP-VPN server did not respond. Try reconnecting. If problem continues verify your settings and contact your Administrator" I get this from both internal and external clients. So Im sure its not a router problem.
I had a probelm before with the PPTP connection, this again came about after working fine for ages... I solved this and then the VPN ws working fine until the L2TP-VPN error appeared.
Im not really sure where to look tbh with regards this... there have been no changes to routers, and in fact the internal VPN connections I had working dont use the router anyway. The external PCs that had a connection were using the PPTP protocol and now they cant connect either so it seems to be a general failure. Although I can get a connection for a short time using my iPhone VPN but this drops off after about a minute, and doesnt allow me to connect to any servers on network, which I could do before when it was all working fine.
Im at a loss with this VPN and hope that someone somewhere out there can help with this. Do Apple read these posts I wonder?
Cheers

I found a TEMPORARY solution.
The short answer: "hard code" all DNS servers. No Automatic configurations.
I have observed that traffic is still route-able over the regular internet connection and to the remote network being accessed via Cisco IPSEC, only DNS is hurt!
To fix this you will have to "hard code" all DNS servers in your network configuration, DHCP and other automatic configurations will be ignored!
On the plus side, you will have all the IP addresses you need will be in your network interface's config as "soft" in a light grey font.
To get to a typical DNS configuration for an interface you will go into System Settings -> Network -> Click on a required interface --> Advanced button and then finally there will be a DNS tab. All you need to do is put that nice and soft IP address in by clicking the "+" button.
If your in a bit of a BIND, for a public DNS server (On your Airport or Ethernet interfaces) may I recommend Google's DNS server at 8.8.8.8 because it is very easy to remember. This will allow you to speed up your configuration by not having to even think of "192.168.0.1","10.0.0.1" or "234.245.12.333". (Good luck with that last one!)
Possibly Optional:
And as for your VPN interface, you will need to add your super secret domains into the "Search Domains" box by clicking on the "+". I have observed some odd behavior with adding these.
If you have issues with the above, you should setup a resolver configuration.
To do this you will have to do the following:
- Open up the terminal, type "sudo bash" and then enter your password.
- Make a directory with "mkdir /etc/resolver"
- Change the current directory to resolver with "cd /etc/resolver"
- Now you will have to create a file for each domain on the VPN you wish to access (yes pain, thankfully I only have a couple to setup). For this example I will use the domain "foo.com", so create the file by typing in "nano foo.com".
- Now fill the file with the following (note the almost bogus IP address) :
domain foo.com
nameserver 8.8.8.8 <-- change to your VPN's DNS server
- Hit "Control+x" to save and exit.
And then you should be OK.
It isn't ideal, but it is working for me at the moment.
BONUS:
Hopefully your host list isn't long, Edit /etc/hosts:
Company hostnames that exist on the public internet you will want to specify in your hosts file.
ie:
mail.your-company-email-hosted-by-google.com
VPN endpoints
Any other site you need outside the VPN
The reason for doing this is once you connect to vpnendpoint.foo.com, you may not be able to resolve it again because of the resolver config or the OS X DNS configuration. So re-connecting to the VPN without rebooting will be impossible, and in one case where I used the raw IP instead of a hostname!
Apple: you're not off the hook, please fix so we don't have to do this crap!
OH, and fix the **** key management issue! I am sick of re-entering my passwords and keys!!

Syncing iPhone to MS Outlook Offline

All,
I am trying to sync my iphone to my corporate email server however, this is not support/allowed by my employer and the server is behind a VPN which is not accessible using the iphones VPN function (it is a Contivity VPN server). Is there a way for me to simply perform a local synch between my PC and iPhone so that i can read my emails on my iPhone when away from my computer? I don't care so much if my email updates on the iPhone when away from my computer but I would like to be able to read emails during long metro rides.
Thanks in advance
Barry

You cannot sync email over a cable; it can only be done over the air. One option is to create a gmail account and forward your Exchange email to it (if your IT dept. will let you do that). Gmail also has a way to reply to forwarded email so it looks like it came from your Exchange account.

Is there any any app like hotspot VPN ?

This isn't free forever so how can i keep it for free for my ipad air if there is no option of doing this then tell me any app like this ?

Hotspot is really best free vpn I don't know what problem you are facing with it... you should check Hotspot Setting again at Settings > VPN or Settings > General > VPN also there are another app like hotspot vpn for iPhone which you can find here..
http://www.bestvpnservice.com/blog/best-iphone-vpn-apps/
http://bestvpnapps.com/
Hope it will help you

IPhone VPN

Similar Messages

Maybe you are looking for