Astaro User Bulletin Board
Go Back   Astaro User Bulletin Board > Astaro Gateway Products > VPN: Site to Site and Remote Access

Welcome to the Astaro User Bulletin Board.
If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 07-03-2009, 01:41 PM
Member
 
Join Date: Sep 2008
Posts: 37
Default IPhone OS 3.0 - Cisco - VPN On demand

Hi,

the new Iphone OS 3.0 features VPN on Demand - which should work with a cisco ipsec connection using certificates. The feature would be really usfull..

did somebody manage to get this to work (i still have problems with some certificates errors)

thx
Reply With Quote
  #2 (permalink)  
Old 07-03-2009, 03:56 PM
BAlfson's Avatar
Moderator
 
Join Date: Mar 2007
Location: Oklahoma City
Posts: 5,323
Default

I'm not aware that the VPN is any different with OS 3.0 compared to 2.x; what has changed?

Recently, I downloaded the iPhone VPN installation from the User Portal. All of the VPNs were configured correctly and functioned flawessly.

Cheers - Bob
__________________
ACE V7 - Astaro Preferred Partner since V3
Addicted to my iPhone!
Reply With Quote
  #3 (permalink)  
Old 07-03-2009, 06:22 PM
Member
 
Join Date: Sep 2008
Posts: 37
Default

VPN on demand is a new feature in OS 3.0 - but you cant configure it on the iphone itself - there is a enterprise configuration tool from apple.
Reply With Quote
  #4 (permalink)  
Old 07-03-2009, 11:00 PM
BAlfson's Avatar
Moderator
 
Join Date: Mar 2007
Location: Oklahoma City
Posts: 5,323
Default

Do you have a link to that? I just spent 15 minutes googling and searching the Apple website to no avail.

Thanks - Bob
__________________
ACE V7 - Astaro Preferred Partner since V3
Addicted to my iPhone!
Reply With Quote
  #5 (permalink)  
Old 07-03-2009, 11:16 PM
Super Moderator
 
Join Date: Feb 2009
Location: In a galaxy far far away
Posts: 857
Default

Bob the software can be found here
__________________

Running Astaro ASG virtual appliance | Home power user 100 IP license
Intel Dual Core 2.4GHz (800MHz) | 4GB (2 x 2GB) PC2-6400 800Mhz 5-5-5-18 | WD 160GB |3 x Intel Pro/1000
Reply With Quote
  #6 (permalink)  
Old 07-04-2009, 02:45 PM
BAlfson's Avatar
Moderator
 
Join Date: Mar 2007
Location: Oklahoma City
Posts: 5,323
Default

Thanks, Wingman. I don't understand what's new and different. I guess it's only that the new Enterprise Utility lets you push VPN configuration along with other settings.
__________________
ACE V7 - Astaro Preferred Partner since V3
Addicted to my iPhone!
Reply With Quote
  #7 (permalink)  
Old 07-04-2009, 03:10 PM
Super Moderator
 
Join Date: Feb 2009
Location: In a galaxy far far away
Posts: 857
Default

My understanding is it's kind of central management for all iphones used within an enterprise environment. I have never used it myself but I guess it could be used for pushing out certificates,vpn configurations and restricitions etc
__________________

Running Astaro ASG virtual appliance | Home power user 100 IP license
Intel Dual Core 2.4GHz (800MHz) | 4GB (2 x 2GB) PC2-6400 800Mhz 5-5-5-18 | WD 160GB |3 x Intel Pro/1000
Reply With Quote
  #8 (permalink)  
Old 07-04-2009, 03:16 PM
BAlfson's Avatar
Moderator
 
Join Date: Mar 2007
Location: Oklahoma City
Posts: 5,323
Default

I played with the original version of the Enterprise Utility a bit last year. As I recall, it did little more than allow the administrator to erase the iPhone when an employee was terminated. The new offering appears to be a tool useful for standardizing in a corporate environment. I'm impressed.

Thanks - Bob
__________________
ACE V7 - Astaro Preferred Partner since V3
Addicted to my iPhone!
Reply With Quote
  #9 (permalink)  
Old 07-06-2009, 09:10 AM
Member
 
Join Date: Sep 2008
Posts: 37
Default

you need this enterprise configuration tool to enable VPN on Demand. My Problem is that i couldnt configure the cisco ipsec vpn. which certifikate do i need to import?

thx
Reply With Quote
  #10 (permalink)  
Old 07-06-2009, 12:32 PM
BAlfson's Avatar
Moderator
 
Join Date: Mar 2007
Location: Oklahoma City
Posts: 5,323
Default

Whichever cert is the 'Server Certificate' entered on the 'Global' tab of 'Cisco VPN Client'. The usual one is the 'Local X509 Cert'.

CHeers - Bob
__________________
ACE V7 - Astaro Preferred Partner since V3
Addicted to my iPhone!
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT. The time now is 01:41 AM.

 

Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2010, Jelsoft Enterprises Ltd.


These pages are specifically maintained for the discussion of firewall issues within the Open Source community, and might already reflect new alpha/beta releases under development. Please refer to our product specifications for the functionality of the actual release. Discussions of new/enhanced functionality does not constitute a commitment of Astaro, to integrate this functionality into future releases. issues within the Open Source community, and might already reflect new alpha/beta releases under development. Please refer to our product specifications for the functionality of the actual release. Discussions of new/enhanced functionality does not constitute a commitment of Astaro, to integrate this functionality into future releases.