Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 9 replies
  • Subscribers 1 subscriber
  • Views 6215 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Cisco VPN Client: Android connects but no internet, iPhone - error?

Light Peak
I've setup L2TP over IPSec (using instructions from here)and Cisco VPN Client (IPSec), but what's the issue is:

Android - Cisco VPN Client:


  • I tried using Android Phone to connect via
    Settings > Wireless & Network settings > VPN Settings > Add VPN > Add L2TP/IPSec PSK VPN
    Filled in VPN name, server (FQDN resolvable to public IP address), pre-shared key, left Enable L2TP secret unchecked then Save.
  • I tapped the VPN connection that i've setup, enter user name and password, then connect.
  • Issue is: it gets connected to VPN server, but i was unable to surf the internet, even intranet (local IP)
  • FYI, i've enabled and setup both L2TP over IPSec and Cisco VPN Client, all others disabled.
  • What i've did:
    [LIST=1]
  • Network security > Firewall > Rules > New rule
    Source: Any
    Service: IPSec (It's a group)
    Designation: External (WAN)
    Action: Allow
    then, "Save"
    and Enable it

    Another Firewall rule:
    Source: Any
    Service: L2TP
    Designation: External (WAN)
    Action: Allow
    then, "Save"
    and Enable it
  • Network security > NAT > DNAT/SNAT > New NAT rule
    Traffic Source: Any
    Traffic Service: IPSec (Group)
    Traffic Designation: External (WAN address)
    NAT mode: DNAT
    Destination: WAN address
    Automatic Firewall rule: Checked
    Save, and Enable it

    Another NAT Rule:
    Traffic Source:     Any
    Traffic Service: L2TP
    Traffic Designation: External (WAN address)
    NAT mode: DNAT
    Destination: WAN address
    Automatic Firewall rule: Checked
    Save, and Enable it
  • Network security > Masquerading > New Masq Rule
    Network Pool:     VPN Pool (Cisco)
    Interface: External (WAN)

    Another Masq:
    Network Pool: VPN Pool (L2TP)
    Interface: External (WAN)

    Another Masq:
    Network Pool: johndoe (User Network)
    Interface: External (WAN)

 
  • Gets connected but no internet/intranet access
  • Log has been attached to this thread
[/LIST]
iPhone - Cisco IPSec client:


  • I downloaded config from user portal saved, install profile.
  • Turn VPN on
    Status: Starting....
  • Then, "The VPN server did not respond."
  • Check IPSec log, nothing comes out.
  • Check Firewall log, nothing related to VPN connection are dropped.


This thread was automatically locked due to age.
Parents Reply
  • 0 in reply to Scott_Klassen
    Keep #1 and get rid of 2 and 3.


    alright, done.
    but still, L2TP over IPSec doesn't work (iPhone). could it be due to "Double NAT-ing"?

    as for Android, L2TP over IPSec and IPSec (Cisco VPN Client) doesn't work.

    Update:
    Removing Masq will cause me not to surf the internet, so i added it back.
Children
No Data