Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 3150
  • Last Modified:

VPN from ipad to Cisco PIX-501

Is is possible to VPN to a PIX-501 from my ipad... in the ipsec config on the ipad it is asking me for Server, account, password, Group Name, and Secret... however with my VPN client I am just used to needing a server address, username and password is it possible to connect to the PIX?
0
Bill Warren
Asked:
Bill Warren
  • 5
  • 3
  • 2
  • +1
1 Solution
 
woolnoirCommented:
have you tried just entering servername username and password and attempting a connection ?
0
 
Bill WarrenIT ManagerAuthor Commented:
Yeah it says i need to enter a secret... I have no secret to add... if I just add anything it does accept it
0
 
woolnoirCommented:
what type of VPN have you configured on the PIX ? what protocol etc. Secrets are generally used for site2site VPN links .. odd why the ipad is prompting for that.
0
VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

 
Bill WarrenIT ManagerAuthor Commented:
ipsec
0
 
woolnoirCommented:
and you have configured it as a remote access VPN and not site to site ?
0
 
Bill WarrenIT ManagerAuthor Commented:
I have it working with both VPN clients and Site to Site VPN there is no "Secret" with the site to site either
0
 
kingdingathingCommented:
Straight from the cisco site:

"The Cisco ASA 5500 series and PIX Firewalls work with the Cisco VPN Client on the iPhone. We highly recommend the 8.0(x) software release or later, but you can also use the 7.2(x) software."

http://www.cisco.com/en/US/docs/security/asa/compatibility/asa-vpn-compatibility.html

It mentions that at the bottom of the page...

Basically its preferred if your PIX-501 has 8.0 or later firmware installed. Then all things should work as its supposed to.
0
 
gavvingCommented:
A PIX 501 cannot support anything higher than 6.3.5.  So don't go try loading 8.0 on it.  

There actually is a 'secret' pre-shared-key password configured for IPSec VPN clients on your PIX-501.  If you looked at the config under the 'vpngroup' section there would be a line that indicated the password.  But it will be stared out and you won't be able to read it.  Likewise the PCF files you're using for your Cisco VPN client are likely already configured with this pre-shared-key password.  

If you don't know what it is, you can try to get it by using TFTP to save a copy of the configuration to a TFTP server.  The file that's created on the TFTP server will have the password saved in clear text.

Whether or not the Ipad/Iphone will work correctly against the PIX with 6.3.5, I'm not positive that it will.  You might have to upgrade to an ASA-5505 to support it.
0
 
Bill WarrenIT ManagerAuthor Commented:
I decided to try to VPN to my Windows Server which I did connect the first time and after that I cannot through the PIX. However i can connect locally to the server. I have opended up port 1736. I just find it odd that I connected once through the WAN but cannot connect again.
0
 
gavvingCommented:
To allow inbound MS PPTP you have to allow inbound port 1723, and GRE protocol to a static one-to-one NATed address for your server.  

access-list acl-outside permit tcp any host 45.2.2.2 eq 1723
access-list acl-outside permit gre any host 45.2.2.2

where 45.2.2.2 is your NATed IP address of your windows server.
0
 
Bill WarrenIT ManagerAuthor Commented:
Thanks those lines did the trick!
0

Featured Post

Evaluating UTMs? Here's what you need to know!

Evaluating a UTM appliance and vendor can prove to be an overwhelming exercise.  How can you make sure that you're getting the security that your organization needs without breaking the bank? Check out our UTM Buyer's Guide for more information on what you should be looking for!

  • 5
  • 3
  • 2
  • +1
Tackle projects and never again get stuck behind a technical roadblock.
Join Now