Configure iPhone iOS to use an IPSec VPN tunnel and resolve reconnect issues

Following on from my post that walks through the set up of an Ubuntu based IPSec VPN server using Openswan and Android, I've now had the chance to also configure an iOS device to work with the same configuration. Read on to see how I configured the iOS 5.0 iPhone 3GS to work with my Openswan IPSec VPN...The following steps I used on an iPhone 3GS iOS 5.o to connect to an Ubuntu IPSec VPN configuration.

  1. Settings
  2. General
  3. Network
  4. VPN
  5. Add VPN Configuration:
  • Select L2TP
  • Description: any
  • Server: server address
  • Account: ubuntu username
  • RSA SecurID: off
  • Password: as per /etc/ppp/chap-secrets
  • Secret: PSK as per /etc/ipsec.secrets
  • Send All Traffic: on
  • Proxy: off  
After setting up the iPhone to work with this IPSec Openswan configuration I experienced the issue that should the iPhone disconnect either intentionally or through a dropped tunnel I was unable to get the iPhone to reconnect to the VPN. The only way to get the phone to reconnect was to restart the IPSec daemon on the Ubunutu  server.             

As Jacco points out one problem is that Apple do not appear to send a “Delete SA” message when the device disconnects. The IPsec connection remains up and the VPN client may not be able to reconnect, and reports an error. He pointed out that the problem is resolved when Dead Peer Detection (DPD) times out, the SA itself times out (if DPD is disabled) or the Openswan daemon is restarted. For this reason it is highly recommended to enable DPD on the Openswan VPN server by adding these parameters to your Openswan configuration (suggested time-out values):

These lines need to be added to /etc/ipsec.conf under the connection configuration and not the daemon configuration from my experience. Putting them in the before the connection configuration will cause openswan to fail when restarting reporting a "confread.c:248: load_setup: Assertion `kw->keyword.keydef->validity & kv_config' failed" error in the terminal.

           dpddelay=40
           dpdtimeout=130
           dpdaction=clear

13 comments:

  1. This comment has been removed by a blog administrator.

    ReplyDelete
  2. This comment has been removed by a blog administrator.

    ReplyDelete
  3. Very nice post. I just stumbled up?n your weblog and wished to say that I have really enjoyed browsing ?our blog posts.
    Regards - www.office.com/setup

    ReplyDelete
  4. With the Popularity of iOS Devices comes the threat of hacking. FastestVPN is the Best iOS VPN that encodes all your personal and financial data securing it from intruders.

    ReplyDelete
  5. Your selection of topic is very good and also well written. Thanks for sharing. I feel like all your ideas are incredible! Great job!!!
     www.mcafee.com/activate

    ReplyDelete
  6. Office.com/setup – Get simple strides for download, introduce Office setup 365, 2016 and 2010.
     www.office.com/setup

    ReplyDelete
  7. McAfee.com/activate – McAfee Antivirus is one of the most critically acclaimed security program across the globe. Protect your devices and data from viruses, malware, Trojan horses, worms, and other cyber threats with real-time protection and threat scanning. Get robust protection offered by McAfee by following the process (download, install, activate) on  www.mcafee.com/activate

    ReplyDelete
  8. Hi
    I read your post and found it quite interesting.
    The post you shared is very unique and informative.
    Thanks for sharing such a useful post.
    mcafee.com/activate
    norton.com/setup
    mcafee.com/activate

    ReplyDelete
  9. It is amazing post, i am really impressed of your post, its realy useful. Thank you for sharing This article.

     norton.com/setup | www.norton.com/setup

    ReplyDelete
  10. If you want to know about celebrities bio and their updates? You can visit Celebrity Ping. Here you will get all celebrities information, Alan Tudyk, Ashley Johnson, Bernie Mac, Calista Flockhart, Christina Hendricks, Dafne Keen, Emily, Eva Ekeblad, Freddie Prinze Jr, Jessica Barden, Jessica Henwick, Joan Cusack, Josh Wickersham Hartnett, Juan Gabriel, Kaitlyn Dever, Kathryn Hahn, Katie McGrath, Ksenia Solo, Laura Haddock, Lauren German, Lea Thompson, Loni Anderson, Lori Loughlin, Lucas Till, Maika Monroe, Maitland Ward, Markie Post, Matthew Gray Gubler, Olga Kurylenko, Phoebe Cates, Phoebe Snetsinger, Rebecca Romijn, Rene Russo, Robin Williams, Theo James, etc.

    ReplyDelete
  11. Stardust Boutique is a Jovani prom dresses company. If you are looking for a prom dress, we are a Jovani dress store and stockist supplying UK, USA, Canada, Australia, internationally.We stock all kinds of Jovani if you want a Jovani prom dresses, Jovani short dress, Jovani evening dress, Jovani pageant dress, jvn prom dress, jvn short dress and pageant dresses.

    ReplyDelete
  12. The Electric Blender for people to save time and reduce stress The Comparisons vs Reviews Deal of best food processor, Best Smoothie Blender, Best Personal Blender, Best Commercial Blender, best portable blender, Best immersion blender, Best Vitamix Blender, best ninja blender,Best Magic Bullet Blender, best Blendtec blender, The comparisons between Blendtec vs Vitamix, of Magic Bullet vs NutriBullet is another issue to consider if you are looking for a smart and efficient blender. But the Nutri Ninja vs NutriBullet will help you to decide to get the right one. and Best Food Dehydrator, Best Food Chopper, best vegetable chopper Reviews, buying a guide.

    ReplyDelete