Configuring Mobile VPN General Settings Parent topic

The IPSec remote access VPN connection is disabled by default. Administrators must configure required options to enable it. The options in the following task define:
  • the interface to use
  • the user authentication method to use
  • the network pool and local network to use
  • VPN On Demand (for iOS) configurations

Procedure

  1. Go to Network → User VPN → Mobile VPN → General tab.
  2. Select the Enable Mobile VPN connection check box.
  3. Select an interface from the drop-down list box box to use for mobile VPN client connections.
  4. Specify the IP address and netmask for the Pool network for the virtual IP addresses that can be assigned to connecting clients.
  5. Specify the user authentication method:
    • Local: The Local method stores username/password in a file.
    • RADIUS: The RADIUS method requires more information (RADIUS server IP address, port, and shared secret.
  6. Specify the IP address of the Local Network.
  7. Click the VPN on Demand (for iOS) link to expand it.
  8. Select the VPN On Demand check box for Apple device access to allow certificate-based VPN configurations, which automatically triggers VPN connections when accessing certain domains.
    Note
    Note
    Enabling VPN On Demand (for iOS) adds this information to the profile file.
    1. Specify the Domain or Host information.
    2. Select the condition under for establishing connection:
      • Always establish
      • Never establish
      • Establish if needed
  9. Click Apply.