?
Solved

How to configure ASA 8.3 for Ipad VPN

Posted on 2011-10-25
8
Medium Priority
?
1,039 Views
Last Modified: 2012-05-12
Hi there,

I've been trying to configure the Ipad to Vpn to the cisco ASA.  I have multiple VPNs already working on this ASA. I'm configuring this through ASDM. I keep getting phase 2 errors. Where do I check the config the wizard did? I've been checking Group policies and ipsec profiles. The Ipad keeps saying L2Tp-VPN server did not respond.

This is on the ASA:
tunnel-group IPAD_IPHONE type remote-access
tunnel-group IPAD_IPHONE general-attributes
 address-pool (Vianet) IPAD-IPHONE
 address-pool IPAD-IPHONE
 authentication-server-group RSA_Server
 authentication-server-group (Vianet) RSA_Server
 default-group-policy DefaultRAGroup_1
tunnel-group IPAD_IPHONE ipsec-attributes
 pre-shared-key *****
 peer-id-validate nocheck
tunnel-group IPAD_IPHONE ppp-attributes
 no authentication chap
 no authentication ms-chap-v1
 authentication ms-chap-v2

Help!
0
Comment
Question by:samashcam
  • 5
  • 3
8 Comments
 
LVL 14

Expert Comment

by:anoopkmr
ID: 37031557

show your full ASA config.

oterwise configre the transform-set for esp-aes and try.
0
 

Author Comment

by:samashcam
ID: 37031953
the full asa config is pages long.. I will try changing the transform-set.  When I try through the wizard, it keeps telling me that it uses the DefaultRAGroup. Can I change that? I don't want this new vpn access to interrupt other vpns that are working.

Thx
0
 
LVL 14

Expert Comment

by:anoopkmr
ID: 37032484
we can change the default group also..

 but for your problem try the transform set option first . hope you are using IPAD for  IPSEC vpn connectivity.
0
 The Evil-ution of Network Security Threats

What are the hacks that forever changed the security industry? To answer that question, we created an exciting new eBook that takes you on a trip through hacking history. It explores the top hacks from the 80s to 2010s, why they mattered, and how the security industry responded.

 

Author Comment

by:samashcam
ID: 37037587
I was trying to do it with L2TP so we can use the RSA keys. Is that not possible?
0
 
LVL 14

Expert Comment

by:anoopkmr
ID: 37037653
0
 

Author Comment

by:samashcam
ID: 37367873
This does not show how to configure with 8.3 code.

0
 

Accepted Solution

by:
samashcam earned 0 total points
ID: 37921260
The only way we got it going is with the Mobile license installed on the IPad. Works perfect now.
0
 

Author Closing Comment

by:samashcam
ID: 37936151
Figured out the solution was the Mobile license and application that needed to get installed on the Ipad.
0

Featured Post

Choose an Exciting Career in Cybersecurity

Help prevent cyber-threats and provide solutions to safeguard our global digital economy. Earn your MS in Cybersecurity. WGU’s MSCSIA degree program was designed in collaboration with national intelligence organizations and IT industry leaders.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This past year has been one of great growth and performance for OnPage. We have added many features and integrations to the product, making 2016 an awesome year. We see these steps forward as the basis for future growth.
Considering cloud tradeoffs and determining the right mix for your organization.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Suggested Courses
Course of the Month15 days, 1 hour left to enroll

839 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question