Disclaimer

The content of this material are challenges faced onsite and how I personally resolved them. Please be noted that solutions posted here

1> should not be considered as ultimate. The material may be considered for reference only.

2> should not be considered as guarantee that solutions may work. Contact Cyberoam support before making any changes.

3> blog does NOT belong to the Cyberoam. It's a blog...a personal blog.

Changes done after referring this site may seriously damage the network. So...

........DO CHANGES AT YOUR OWN RISK

(please contact cyberoamsupport before implementing any changes)

Monday, 5 December 2011

L2tp not connecting from IPADS

Hi All,

Today I encountered an issue and good finding.

Issue Description: Users with windows PC/lappy were able to connect to L2TP but not iPad users.

Resolution Steps:
1> Were using l2tp authentication protocol as ANY
  console> sh vpn config
PPTP
        AUTHENTICATION      ANY
        ENCRYPTION          DISABLE
L2TP
        AUTHENTICATION      ANY

2> The users who were connecting from the PC were using PAP
console> sh vpn L2TP-logs

3> On Google we found that iPad uses MS-CHAPv2 as auth protocol.

4> Users were on AD

5> Since MS-CHAPv2 windows proprietary and we can not use it. So we turned to use IAS and installed RADIUS on AD.

6> Integrated RADIUS with CR

7> And made the VPN users to authenticate with authentication server as RADIUS

8> It worked well with all the users using MS-CHAPv2 as authentication protocol



No comments:

Post a Comment