This topic has been marked solved and closed to new posts due to inactivity. We hope you'll join the conversation by posting to an open topic or starting a new one.
Trying to connect an iPhone6 using VPN. Using "Application Notes for IPSec Policy supporting Apple iPhone VPN Connectivity" from Atricle ID: 24236
Does not connect with following log:
2016 Nov 29 16:50:33 [FVS338] [IKE] Received mode config from 104.10.253.74[500], but we do not have ISAKMP-SA._ 2016 Nov 29 16:50:33 [FVS338] [IKE] an undead schedule has been deleted: 'ph1_main'._ 2016 Nov 29 16:50:33 [FVS338] [IKE] Failed to find proper address pool with id -1_ 2016 Nov 29 16:50:33 [FVS338] [IKE] Sending Informational Exchange: delete payload[]_ 2016 Nov 29 16:50:33 [FVS338] [IKE] Radius Server Timeout_ 2016 Nov 29 16:50:33 [FVS338] [IKE] 0.0.0.0 IP address has been released by remote peer._ 2016 Nov 29 16:50:33 [FVS338] [IKE] Received attribute type "ISAKMP_CFG_REPLY" from 104.10.253.74[500]_ 2016 Nov 29 16:50:33 [FVS338] [IKE] ISAKMP-SA established for 104.10.253.75[500]-104.10.253.74[500] with spi:8162fc629e57bc78:0006552c4ac621f2_ 2016 Nov 29 16:50:32 [FVS338] [IKE] Sending Xauth request to 104.10.253.74[500]_ 2016 Nov 29 16:50:32 [FVS338] [IKE] Ignore INITIAL-CONTACT notification from 104.10.253.74[500] because it is only accepted after phase1._ 2016 Nov 29 16:50:32 [FVS338] [IKE] Setting DPD Vendor ID_ 2016 Nov 29 16:50:31 [FVS338] [IKE] DPD is Enabled_ 2016 Nov 29 16:50:31 [FVS338] [IKE] Received Vendor ID: DPD_ 2016 Nov 29 16:50:31 [FVS338] [IKE] Received unknown Vendor ID_ 2016 Nov 29 16:50:31 [FVS338] [IKE] Received Vendor ID: CISCO-UNITY_ 2016 Nov 29 16:50:31 [FVS338] [IKE] Received Vendor ID: draft-ietf-ipsra-isakmp-xauth-06.txt_ 2016 Nov 29 16:50:31 [FVS338] [IKE] Received Vendor ID: draft-ietf-ipsec-nat-t-ike-02__ - Last output repeated 8 times - 2016 Nov 29 16:50:31 [FVS338] [IKE] Received unknown Vendor ID_ 2016 Nov 29 16:50:31 [FVS338] [IKE] Beginning Identity Protection mode._ 2016 Nov 29 16:50:31 [FVS338] [IKE] Received request for new phase 1 negotiation: 104.10.253.75[500]<=>104.10.253.74[500]_ 2016 Nov 29 16:50:31 [FVS338] [IKE] Anonymous configuration selected for 104.10.253.74[500]._
Try configuring the VPN using this article instead. The previous article you used might not work the way it is intended due to the difference between firmware versions and iPhone model.
We’d greatly appreciate hearing your feedback letting us know if the information we provided has helped resolve your issue or if you need further assistance.
If your issue is now resolved we encourage you to mark the appropriate reply as the “Accepted Solution” so others can be confident in benefiting from the solution. The Netgear community looks forward to hearing from you and being a helpful resource in the future!
Thank you for you suggest article. Unfortunately the article didn't address the FVS338. There is no place to added a user and the only choice for type is admin or guest. So I purchased a FVS336v2 with the latest firmware and tried connecting though it using the setup in the article. Did finally get it working with some variations and problems. Problems:
1. Trying to connect through the WAN is nearly impossible. It would continually drop the connection. Had to connect through the LAN. The FVS338 didn't have the problem.
2. The only way to connect the IPhone and pass data was to use the Mode Config we had for the Netgear VPN Client used for a Windows laptop.
3. It would connect using the Mode Config the article suggested, but wouldn't pass data.
4. To have changes have effect was to disconnect power and re-connect or to delete the configuration, reboot and install the new configuration. The reboot command was questionable if it did any thing.
The connectivity over the WAN is the same with or without the VPN active. The connectivity through the VPN is slightly better, but still poor. The FVS338 didn't have any connectivity problems.
Connecting via the Netgear VPN Client on a Windows 7 machine is more reliable.
The only reliable connection is a cable connected to the LAN.
I have checked the serial number you have provided and it appears that this unit was already used. The previous owner has had issues with internet detection and download speeds (issue was resolved apparently after contact). What we can try is to perform a factory reset (using the Factory Defaults Button), but before that we'll have to save the configuration. To do this, go to Administration>Settings Backup and Upgrade.
Tried three different Web Browsers on the same computer.
Internet Explorer 11 --------------- Worked on WAN. Very stable Google Chrome 55.0.2883.87 -- Was able to logon sporadically, but would drop Firefox 50.1.0 ---------------------- Was able to logon sporadically, but would drop
The VPN feature of the firewall may not really be designed for other clients, rather it is for the NETGEAR VPN client. The article posted was a workaround. IMHO it is hit or miss. There is an updated KB of the mode config solution, see if this will make a difference. Click here.
I spent most of my day trying to get this setup as well. I was able to make the VPN connection from my iPhone over 3G to my FVS338 with the latest firmware. However, once connected I couldn't access any of the devices on the LAN. Also I lost all internet access on the iPhone when my VPN connection was active. As soon as I turned off the VPN on iPhone all internet access was restored.
