Disclaimer

The content of this material are challenges faced onsite and how I personally resolved them. Please be noted that solutions posted here

1> should not be considered as ultimate. The material may be considered for reference only.

2> should not be considered as guarantee that solutions may work. Contact Cyberoam support before making any changes.

3> blog does NOT belong to the Cyberoam. It's a blog...a personal blog.

Changes done after referring this site may seriously damage the network. So...

........DO CHANGES AT YOUR OWN RISK

(please contact cyberoamsupport before implementing any changes)
Showing posts with label VPN:L2TP. Show all posts
Showing posts with label VPN:L2TP. Show all posts

Monday, 5 December 2011

L2tp not connecting from IPADS

Hi All,

Today I encountered an issue and good finding.

Issue Description: Users with windows PC/lappy were able to connect to L2TP but not iPad users.

Resolution Steps:
1> Were using l2tp authentication protocol as ANY
  console> sh vpn config
PPTP
        AUTHENTICATION      ANY
        ENCRYPTION          DISABLE
L2TP
        AUTHENTICATION      ANY

2> The users who were connecting from the PC were using PAP
console> sh vpn L2TP-logs

3> On Google we found that iPad uses MS-CHAPv2 as auth protocol.

4> Users were on AD

5> Since MS-CHAPv2 windows proprietary and we can not use it. So we turned to use IAS and installed RADIUS on AD.

6> Integrated RADIUS with CR

7> And made the VPN users to authenticate with authentication server as RADIUS

8> It worked well with all the users using MS-CHAPv2 as authentication protocol