topic Re: Problemes with xauth and iphone vpn in General Topics

Problems with xauth and iphone vpn

klumpen — Tue, 01 Oct 2013 09:38:39 GMT

Hi,

I have a iphone (ios 7) what i am trying to connect to our global connect vpn setup.

Android have the same problem, and computers using the global connect client is working fine.

This worked fine some time ago, but now I am not able to pass any traffic through the vpn. Looks like there is a issue with default route.

We have not the global connect licens, so are using the Cisco System adapter function.

PA is running 5.0.4

Anyone have this issue, and know how to solve it?

Re: Problemes with xauth and iphone vpn

Phoenix — Tue, 01 Oct 2013 14:23:08 GMT

Hello Klumpen,

Per my recent update Iphone 5S model is 64 bit OS and the support for GP is yet to come. But looks like the issue is seen on Android devices too. In that case I would suggest to collect logs on the cell phone from GP client and the logs would share details if the default route details was passed from the portal to the device.

Thanks

Re: Problemes with xauth and iphone vpn

gswcowboy — Tue, 01 Oct 2013 14:30:10 GMT

That's correct. 5s is 64bit OS and currently not supported. Partial support should be made readily available in several days so stay tuned. Full support requires an update to OS from Apple and I believe they are working on that as well.

Re: Problemes with xauth and iphone vpn

klumpen — Wed, 02 Oct 2013 09:06:19 GMT

I have iphone 5, and are using the "cisco virtual adapter" vpn, not the global protect client.

This worked fine before.

Re: Problemes with xauth and iphone vpn

Retired Member — Wed, 02 Oct 2013 17:13:30 GMT

if it worked before check if you have access routes more than 1 or not ?

Re: Problemes with xauth and iphone vpn

klumpen — Mon, 14 Oct 2013 18:19:57 GMT

It looks like there is a problem with esp and iphone/android/xauth. Is there any way to force esp to encapsulate into a udp? This is for sure a firewall and a nat issue.

Re: Problemes with xauth and iphone vpn

kfindlen — Mon, 14 Oct 2013 18:30:45 GMT

Are you using an iPhone 5 or 5s? I have tested X-Auth with IOS7 on the iPhone 5 and I have not seen any issues on both Wifi and LTE connections.

Re: Problemes with xauth and iphone vpn

klumpen — Tue, 15 Oct 2013 09:09:18 GMT

Tried both Iphone 4S, 5 and many androids. Android workes sometime fine on wlan, but never 3g.

Iphone works always fine on 3g, but have some issues on wlan.

Re: Problems with xauth and iphone vpn

klumpen — Wed, 13 Nov 2013 20:00:16 GMT

I have solved this problem.

Iphone and android have issues with nat, and how to encapsulate esp within a udp-package.

Solved this by insering a reverse proxy before the global protect portal and enabling SNAT.

Now both iphone and android work fine.

Thanks for all help