Jump to content

This is the support site for Andrews & Arnold Ltd, a UK Internet provider. Information on these pages is generally for our customers but may be useful to others, enjoy!

FireBrick Road Warrior iPhone iPad iOS8: Difference between revisions

m
no edit summary
mNo edit summary
mNo edit summary
 
(20 intermediate revisions by 2 users not shown)
<indicator name="RoadW">[[File:Menu-Road-Warrior.svg|link=:Category:FireBrick_IPsec_Road_WarriorFireBrick IPsec Road Warrior|30px|Back up to the FireBrick Road Warrior Category Page]]</indicator>
 
Currently (June 2015) iPhone and iPad devices need a 'profile file' to be generated and then sent to the device. This file contains the IPsec details. FireBrick has a bash script that can be used (on a linux or windows machine with cygwin) to generate the gile.
= THIS IS NOW LEGACY INFORMATION. USE LATEST IOS AND LETS ENCRYPT CERTS =
 
=iOS 8=
Currently (June 2015)'''Older iPhone and iPad devices running iSO 8''' need a 'profile file' to be generated and then sent to the device. This file contains the IPsec details. FireBrick has a bash script that can be used (on a linux or windows machine with cygwin) to generate the gilefile. This are easier in iOS 9. If you are running iOS9 then see the [[FireBrick Road Warrior iPhone iPad iOS9|iOS 9 Page]].
 
==make-profile tool==
youYou can download the script from:
http://www.firebrick.co.uk/tools/make-profile
 
You may need the package uuid-runtime if you get the error 'uuidgen: command not found'
== iPhone profile ==
 
== Install iPhone profileProfile ==
 
Each iPhone needs a profile file specific to that user. Once created you can email this, or make a web link to it, and the iPhone will recognise it and allow it to be installed. Let's call it <tt>fred.mobileconfig</tt> for our user called ''fred'' as in the above example config.
Note that the SERVERID must match the FQDN entry used when making the server certificate, and hence the local-ID in the config for the connection.
 
#Once the .mobileconfig file has been generated:
[[File:Ipsec-iphione.png|none|frame|VPN up on an iPhone]]
#Email the file to the iDevice.
#The file should open in the 'Install Profile' app (Screenshot below)
#Tap Install
#Tap You'll be asked to review and then enter your pin (if you have one for the device) (Screenshot below)
#Tap Install, and then Install again (yes the Third tap!)
#Enter your password for the IPsec account (this is the one as set up in the EAP Identity on the FireBrick (in this example, we had set up a user of fred with a password) (Screenshot below)
#Tap next
#Tap Done
 
==Connect==
Go to:
Settings -> VPN - Tap the On/off slider thing
 
==Screenshots==
 
<gallery widths=200px>
FireBrick-IPsec-iPad-1InstallProfile.jpg|This screen comes up once you click on the profile file to install it
FireBrick-IPsec-iPad-2passcode.jpg|You'll need to enter in your devices pin code, if you have one set up
FireBrick-IPsec-iPad-3-cert.jpg|Confirm the Certificate
FireBrick-IPsec-iPad-4-password.jpg|Enter in the password as configured at the FireBrick side
FireBrick-IPsec-iPad-5-connect.jpg|Connect to the VPN via Settings and VPN
[[File:Ipsec-iphione.png|none|frame|VPN up on an iPhone]]
</gallery>
 
==Deleting the VPN Profile==
Removing the VPN is not as easy as you would think, the settings is actually a profile, so you need to delete the profile via:
Setting -> General -> Profile -> Click on your VPN profile -> Click Delete Profile
 
[[Category:FireBrick_IPsec_Road_WarriorFireBrick IPsec Road Warrior|iPhone]]
autoreview, Bureaucrats, editor, Interface administrators, reviewer, Administrators
12,274

edits