Can't connect VPN-IPsec on phones

[noc]

Hi,

I'm having trouble with this setup with an IPsec setup: I'm trying to replicate what i had with ssl-vpn; multiple local user groups and the possibility to connect via phone.

I could make it work with different users by using a tunnel for each group with a unique ID, the problem is when connecting via phone it doesn't work. I've read some documents that say to use IKEv1, other to use IKEv2, the problem is FortiClient mobile doesn't let me configure auth/enc on IKEv1.

I also tried using eap settings but i get stuck in the login prompt, asking for the password on repeat, so i still couldn't connect with phone with any of the config i tried.

Have anyone encountered this? or do you have any paper with the steps on how to make an IPsec tunnel work for both PC and mobile?

Thanks,

[funkylicious]

hi,

Android / iOS ?

[noc]

I've tried using Android and it didn't work, but i'm mostly using iOS for my tests

[funkylicious · Accepted solution]

have a look at the following for iOS, for Android I think something similar can be done.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-iPhone-and-iPad-Dialup-User-IPsec-VPN-samp...

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Apple-IOS-native-VPN-using-IKEv2-connectio... 

[noc]

Thanks! I could connect with phone following one of the guides.

I think it's not possible to have fortitoken via mail working with this setup, right?  

[funkylicious]

i havent tested it, but you could try.

L.E. https://community.fortinet.com/t5/FortiGate/Technical-Tip-Increasing-email-Token-expiry-time/ta-p/19...