Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 4 replies
  • Subscribers 1 subscriber
  • Views 3110 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

IPSec VPN with iOS and dropped invalid packets

R.Weber
Hi,

i'm trying to get my UTM Home Edition up and running but the VPN will not work like i will.

I need an IPSec connection from my iPhone (iOS 9) with PSK into my internal LAN. I've created a User with password and an IPSec Remote Access Rule for this user. The VPN connection can be established, but is feels like all traffic is ending in /dev/null.

Can somebody help me to find the error? What have i done wrong? I took some screenshots to describe my config [;)]

kind regards
R.Weber


This thread was automatically locked due to age.
  • 0
    Hi, and welcome to the User BB!

    The IPsec client in the iPhone works with the 'Cisco VPN Client' server, not 'IPsec'.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0
    Thanks for your response.

    But... I have a running IPsec (only) connection from my iPhone to my UTM Server. I have only the problem that the traffic don't reach my internal server. The packets were dropped by the firewall:
    2015:09:24-10:28:21 home ulogd[2605]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth1" outitf="eth0" srcmac="34:31:xx:xx:xx:xx" dstmac="fc:aa:xx:xx:xx:xx" srcip="10.242.4.1" dstip="192.168.1.5" proto="6" length="64" tos="0x00" prec="0x00" ttl="63" srcport="55011" dstport="8181" tcpflags="SYN" 

    I have already added a firewall rule:
    Source: "User Network"
    Services: "any"
    Destination: "any"

    When i change the Source to "VPN Pool (ipsec)" there is no other result.

    Any ideas?

    Ralf
  • 0
    Ralf, srcip="10.242.4.1" means some kind of misconfiguration as that should be the default gateway assigned by the IPsec to Remote Access IPsec users and there should be no traffic coming from it going into your LAN.

    It is interesting that you were able to get this far, so my curiosity is piqued.  Please click on [Go Advanced] below and show a picture of the Edit of the 'IPsec Remote Access Rule'.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0
    at first update your ios devices to IOS 9.0.1.. there are bugfixes for VPN-connections in it...

    greets

    zaphod
    ___________________________________________

    Home: Zotac CI321 (8GB RAM / 120GB SSD)  with latest Sophos UTM
    Work: 2 SG430 Cluster / many other models like SG105/SG115/SG135/SG135w/...

Unfiltered HTML