connecting to IPSEC VPN works over WIFI but NOT over 3G?????!? or edge.help

Question

Level 1

0 points

connecting to IPSEC VPN works over WIFI but NOT over 3G?????!? or edge.help

hi i configured my vpn client on the iphone to connect successfully to my ipsec vpn network at work. everything works fine over wifi, mail, calendar etc. however, the moment i turn wifi off and switch to 3G or Edge, i cant surf or get mail or get access to the net out of any applications in general...what the heck is going on and why would this be? im on fido(rogers) in canada....

if anyone has any solutions please let me know im so close to being able to ditch my blackberry if this can work over 3g!

windows, Windows XP

Posted on Jul 29, 2008 8:21 AM

Reply

Answer 1

Jul 29, 2008 11:30 AM in response to ht2k05

It sounds like an issue of configuration of your CPN Concentrator. Web services work fine for me while connected to our network via VPN. I've forgotten the terminology, but there is a setting in the Cisco 3000 series to direct VPN traffic through the VPN while using your normal Internet connection for the rest of the traffic.

Marley

Reply

Answer 2

ht2k05 Author

Level 1

0 points

Jul 29, 2008 11:33 AM in response to Marlyn Graham

i actually cannot connect to Anything when connected to my vpn over edge or 3g. i see the banner and i hit ok and it says im connected, but i cant access anything email , web nothing, i also tried to ping the IP the iphone has been assigned to and nothing.

when i do the exact same thing over WIFI, i connect perfectly and everything works fine.

Reply

Answer 3

gvde

Level 1

18 points

Jul 29, 2008 7:29 PM in response to ht2k05

Is this a split tunnel setup or not, i.e. do you sent all traffic through the VPN tunnel or only the traffic for the remote network. I have two profiles on my router, one does split tunneling and one not. The one with the split tunneling works while the other does not. Both work without issues on my MacBook.

Reply

Answer 4

ht2k05 Author

Level 1

0 points

Jul 29, 2008 10:53 PM in response to gvde

not sure if its a split tunnel is this something i can control on the vpn config on the iphone or does it have to be checked on the vpn/router side.

Reply

Answer 5

gvde

Level 1

18 points

Jul 29, 2008 11:19 PM in response to ht2k05

The split tunnel is configured on the router/concentrator. You cannot influence this. I am not sure whether you can easily find out on the iphone which traffic is encrypted and which not. If you use the same VPN on a computer you can check the Cisco VPN Client: open the Statistics from the Status menu. Check the Route Details. If you don't have split tunnel, then the secured routes are 0.0.0.0/0.0.0.0. If you have a split tunnel, then you'll see something else there, listing the IP addresses of the IP networks which go through the VPN.

Reply

Answer 6

ht2k05 Author

Level 1

0 points

Jul 30, 2008 8:52 AM in response to ht2k05

it looks to me like its something wrong with the apn my provider is using (FIDO) over wifi it works fine...i have opened a ticket with fido for them to check the new apn the iphone 3g is using.

Reply

Answer 7

ht2k05 Author

Level 1

0 points

Aug 21, 2008 12:56 PM in response to ht2k05

bumping this as i have read some other people now from different carriers (orange, rogers, fido) have the same issue.

connects to vpn over wifi but not edge or 3g.

someone from APPLE please contact our carriers and get them to fix the issue!! its obviously on the carrier side/apn/routing/firewall whatever.

i have even had my internal network administrators check our corp vpn and nothing is being blocked. im tired of getting the run around and this not working for business-its why i bought the iphone!!!

seriously disappointed.

Reply

Answer 8

Sep 25, 2008 3:19 PM in response to ht2k05

I have the same issue, did a lot of tests, all the traffic is blocked on the carrier side ...

Works fine with WiFi.

How can apple promote the iphone for business use while they use providers who block everything (like all canadian carriers)

APPLE PLEASE work on this issue with the carriers as requested by everyone. Thoses carriers block the technology from evolving.

Reply

Answer 9

Sep 25, 2008 9:06 PM in response to ht2k05

Answering myself ....

I have made a micro-website to ease the process, it will install a "profile" and make the VPN thru 3G/edge work directly. ( *FIDO only for now* )

This is not a hack, this is based on Apple's specs, publically posted.

Just visit http://www.jflaflamme.com/iphone *from your iPhone*
(WEBPAGE WILL WORK FROM IPHONE ONLY)

Feel free to send my .mobileconfig from other carriers to jflaflamme on the gmail dot com website and i will add them.

I feel like i just did my carrier work for free ...

Thanks to tazmtl for his link to the APN settings in
http://discussions.apple.com/thread.jspa?messageID=7765146#7765146

Message was edited by: jflaflamme

Message was edited by: jflaflamme

Reply

Answer 10

RickBeec

Level 1

0 points

Oct 2, 2008 2:42 PM in response to jflaflamme

Thanks jflaflamme! The installer worked great and changed my APN. I am still unclear on the data charges that may apply. I got in on the last day of the $30/6GB Fido plan. I have changed back until I can confirm thisw as there is a ton of conflicting information about this.
Will data routed through this APN fall inside my existing data plan?
Any idea on if this will work for other VPN protocals, or only the https Ipsec Cisco one? We have 5 sonicwalls.

Reply