[8.300] iPhone Cisco VPN to "Any" network

Hello

After i received my first iPhone (4S) yesterday, i thought that it's time to play around a bit with VPN.

First i had the well known "Could not validate the server certificate" error. Fixed by recreating the Certificate, and also the CA in my case.

So far so good. Could install the Profile on the iPhone and connect to the Astaro.

Then i wanted to route all traffic through the Astaro. Did that many times with SSL VPN before. Added "Any" to the local networks (also tried "Internet") and selected "Automatic Firewall rules" for the first testings. Also added Astaros IP address as DNS server in "Advanced" tab. Nothing worked at all. Tried with IP adresses only to bypass any DNS issues... Nothing...

Removed the "Any" network and added my internal network only. That works! As soon i switch back to any, even the internal network does not work anymore.

Masqerading, Firewall rules, DNS, everything is fine.

But when i compare the logs (see attachments) the logs from the "Any" network test have some errors as soon i access an IP address which the one with the internal network only doesn't has.

No idea what that could be. Anyone?

Attached Files

	Internal only.txt (10.2 KB)
	Any.txt (8.2 KB)