Topic : iPhone 3G Cisco VPN Connection Problems

Topic Archived This topic has been archived - replies are not allowed.


This question is not answered. "Helpful" answers available: 2 . "Solved" answers available: 1 .



            Permlink
            Replies : 51 - Pages : 4 [ Previous | 1 2 3 4 ] - Last Post : Feb 18, 2009 1:39 PM by: David Hulse
hal4sn

Posts: 11
Registered: Nov 15, 2005
Re: iPhone 3G Cisco VPN Connection Problems
Posted: Sep 4, 2008 9:39 AM   in response to: nmonkee
 

It appears that only certain Cisco VPN servers are compatible with the iPhone/iPod touch. Cisco has a compatibility statement specific to the iPhone and their VPN solutions. http://www.cisco.com/en/US/docs/security/vpn_client/cisco_vpn_client/iPhone/2.0/connectivity/guide/iphone.html

We discovered (the painful way) that the while the Cisco 3000 Concentrator allows the iPhone/iPod touch to connect and work, it impedes other from transferring data from the VPN to the client after that point. Devices the connect after an iPhone will get an IP address, but no data will be sent from the internal network to the client. It is my understanding if our network team update the software on the VPN server, they will have the ability to block iPhone and iPod devices. This should help return the otherwise stable Cisco VPN service to approved/compatible devices and clients.

Message was edited by: hal4sn

iPhone 2.02   Other OS   Cisco IPSec  
joe40

Posts: 7
Registered: Jul 2, 2007
Re: iPhone 3G Cisco VPN Connection Problems
Posted: Oct 18, 2008 6:56 PM   in response to: hal4sn
 

We have both a PIX 501 with software 6.3(4) and also an ASA5505 with software 7.2(4).
I can confirm the exact behavior as stated above for a PIX 501 (does not work)
and that a Cisco ASA5505 on the receiving end DOES work. I have tested this with a PIX 501 and 3 different ASA5505's.
The PIX product line went END-OF-LIFE and is no longer going to be receiving software upgrade support.
The ASA product line is much more capable and is essentially the replacement for the PIX series of VPN devices.
I tried this with a 1st generation iPhone 8GB (Model MA712LL) running version 2.1 (5F136) software.
I too found it odd that it the "Enter your user authentication" screen would come up and the only choices were "Cancel" or "OK", even though I had entered my credentials during setup. The exact same configuration works well for the same phone connecting to a Cisco ASA 5505.

MacBook Pro 2.16   Mac OS X (10.4.11)    
joe40

Posts: 7
Registered: Jul 2, 2007
Re: iPhone 3G Cisco VPN Connection Problems
Posted: Oct 18, 2008 7:05 PM   in response to: joe40
 

How to integrate iPhone or iPod touch with your enterprise systems
http://www.apple.com/support/iphone/enterprise/

See: iPhone and iPod touch Enterprise Deployment Guide
Third Edition VPN Setup Pages 48, 49 and 50
http://manuals.info.apple.com/en_US/Enterprise_Deployment_Guide.pdf

iPhone and iPod touch: Setting up VPN
http://support.apple.com/kb/HT1424

iPhone and iPod touch: Supported protocols for VPN
http://support.apple.com/kb/HT1288

iPhone and Virtual Private Networks (VPN)
http://images.apple.com/iphone/enterprise/docs/iPhone_VPN.pdf

The iPhone Configuration Utility and the iPhone Configuration Web Utility
both require OS X 10.5 Leopard

MacBook Pro 2.16   Mac OS X (10.4.11)    
ggreene@work

Posts: 1
Registered: Oct 30, 2008
Re: iPhone 3G Cisco VPN Connection Problems
Posted: Oct 30, 2008 11:32 AM   in response to: Smilin Joe
 

What problems are you running into with this configuration, since I have a similar setup here at work (VPN Concentrator 3000 running the 3.5.2 concentrator software) and am unable to get connected, and have no info as to how best to debug this....

  Mac OS X (10.5.5)   IT Manager @ Minerva Networks
Neil McGillivray

Posts: 28
From: West Coast, Sweden
Registered: Feb 7, 2005
Re: iPhone 3G Cisco VPN Connection Problems
Posted: Dec 5, 2008 10:38 AM   in response to: ggreene@work
 

"Neither Cisco IOS VPN routers nor VPN 3000 Series Concentrators support iPhone VPN capabilities."

page 47, Enterprise_Deployment_Guide.pdf
http://manuals.info.apple.com/en_US/Enterprise_Deployment_Guide.pdf

Powerbook G4 1.33 15   Mac OS X (10.4.8)    
peterdawolf

Posts: 1
From: USA
Registered: Dec 30, 2008
Re: iPhone 3G Cisco VPN Connection Problems
Posted: Dec 30, 2008 11:35 AM   in response to: Bruce.Ferjulian
 

Funny, I am using 7.2(5) on an ASA5520 and I am getting no love from the IPSec client. It did seem to work prior to version 2.2(5G77), under 2.1 it connected, when I first bought the phone. I hadn't tested it after installing the 2.2 update,
and now all of the sudden it's broken with unhelpful syslog messages from my ASA and an unhelpful message from my iPhone about the VPN node not responding.

Just because there are two vendors involved does not mean the issue should be passed back and forth with no valid result.

Peter

Many   Other OS   *nix .. MacOS .. Winblows  
David Hulse


Posts: 26
Registered: May 26, 2005
Re: iPhone 3G Cisco VPN Connection Problems
Posted: Feb 18, 2009 1:38 PM   in response to: peterdawolf
 

We've managed to get our iPhone users working via our ASA5510s by upgrading the ASA software to v8.03.

Not sure if it's the same issue, but if you have an upgradable license it should resolve the problem.

Alu iMac 2.0GHz 3GB RAM/Penryn MBP 2.4GHz 4GB RAM   Mac OS X (10.5.6)