This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

iOS 5 and vpn

Hello,
I upgraded an iphone to iOS 5 and since Then I cannot connect my vpn. The connection is refused saying it cannot validate the server certificate. I tried with another ipad ios4 and it works perfectly.
Any feedback on this issue is much appreciated.

Mourad Dahoumane

This thread was automatically locked due to age.

0 AKitzmann over 13 years ago

Same Problem. Feedback would be nice.
Cancel
Vote Up 0 Vote Down

Cancel
0 Kestutis over 13 years ago in reply to AKitzmann

IPSec VPN working perfectly with iOS5 on iPhone 4.
Cancel
Vote Up 0 Vote Down

Cancel
0 AchimSaur over 13 years ago in reply to AKitzmann

which version of ASG do you use?

Regards

Achim
Cancel
Vote Up 0 Vote Down

Cancel
0 dknyinva over 13 years ago in reply to AchimSaur

running IOS 5 with PPTP, L2TP, and IPSEC VPN with no issue. ASG v8.202. Try recreating and see if it resolves.

Thanks
Cancel
Vote Up 0 Vote Down

Cancel
0 AchimSaur over 13 years ago in reply to dknyinva

strange...
Disabled Cisco VPN on ASG, deleted User on ASG, deleted IPhone Profile, recreated User and enabled Cisco VPN on ASG. There`s no XAUTH popup on the IPhone. Version 8.103 updated to 8.202 same steps same problem. The more strange thing is: Tested with the same IPhone on another ASG, same IPhone, same Version. No Problems. What the hell.

Regards

Achim
Cancel
Vote Up 0 Vote Down

Cancel
0 BrucekConvergent over 13 years ago in reply to AchimSaur

There's a known issue with the new iPhone OS (seems to affect those using the "cisco" client). See http://www.astaro.com/lists/Known_Issues-ASG-V8.txt
Cancel
Vote Up 0 Vote Down

Cancel
0 d12fk over 13 years ago

Use a Server Certificate with 2048 bit key length. This should do the trick.
Seems Cisco increased the minimum key length in iOS 5.
Cancel
Vote Up 0 Vote Down

Cancel
0 AKitzmann over 13 years ago

Followed the Workaround in the Known Issues. But same Problem. :/
Cancel
Vote Up 0 Vote Down

Cancel
0 AKitzmann over 13 years ago

Could it be, that the VPN Signing CA that gets exported to the VPN Configuration has to be 2048 bits in length too ?

The Certificate that ist configured unter Remote Access->Cisco VPN Client->Global is not exported to the VPN Configuration, but the Certificate of the Signing CA that signed this server certificate is exported and the user certifcate for client access.

Perhaps the signing CA Cert must be a 2048bit key length too ?
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 13 years ago

Kitzmann, are you saying that the resolution offered by d12fk (just above your post), did not resolve your issue?

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel