Skip to main content
Mutallib
New Member
June 14, 2018
Question

VPN for iPhone

  • June 14, 2018
  • 4 replies
  • 9164 views

We are using PPTP VPN for accessing to our LAN, but the PPTP isnt supoorted by iphones (anymore). So how can I configure VPN for iPhone users. 

I have shecked the article:  http://docs-legacy.fortinet.com/cb/html/index.html#page/FOS_Cookbook/IPSec/cb_ipsecvpn_iphone.html

but it guides to configure DMZ, but we dont have any DMZ setup. So how can we bypass the DMZ part.

 

Thanks

    4 replies

    Toshi_Esumi
    SuperUser
    SuperUser
    June 14, 2018
    ericli_FTNT
    Staff
    Staff
    June 14, 2018

    Also you can build IPsec VPN with native VPN setting on your iOS device with FortiOS.

    On WebGUI: VPN-IPsec wizard-remote access-iOS native

    Mutallib
    MutallibAuthor
    New Member
    July 2, 2018

    Do I need to have SSL certificate purchased? Or where can I generate theSelf-Signed certificate?

    Forgot to mention we have very old firewall, 224B with OS ver 4.0 MR2

    Mutallib
    MutallibAuthor
    New Member
    July 5, 2018

    This is the configuration I have done:

     

    IPSen VPN Config:

    config vpn ipsec phase1

    edit "iOS_P1"

    set type dynamic

    set interface "wan1"

    set proposal 3des-sha1 aes128-sha1

    set keylife 86400

    set psksecret ENC XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

    next

    end

    config vpn ipsec phase2

    edit "iOS_P2"

    set phase1name "iOS_P1"

    set proposal 3des-sha1 aes128-sha1

    set dhcp-ipsec enable

    next end

    IP Range:

    config system dhcp server

    edit 1

    set default-gateway 192.168.3.1

    set dns-service default

    set interface "wan1"

    config ip-range

    edit 1

    set end-ip 192.168.1.240

    set start-ip 192.168.1.235

    next

    end

    set netmask 255.255.255.0

    set server-type ipsec

    set ipsec-lease-hold 0

    next

    end

    Policy:

    edit 110

    set srcintf "wan1"

    set dstintf "port23"

    set srcaddr "VPN-iOS" set dstaddr "Internal_Int" set action accept

    set schedule "always"

    set service "ANY"

    set logtraffic enable

    next

     

    I am getting the folowing error:

    Level                     error Sub Type               ipsec ID                         37125 Virtual Domain       root Message                IPsec phase 2 error Action                    negotiate Error                      Reason no matching gateway for new request

     

    DOnt know whats wrong

    Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
    Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
    Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT