ASA 5520 & IPhone 2.0 not compatible ?

Unanswered Question
Jul 22nd, 2008


I have a big problem with the iPhone 2.0 IPSEc client (compatible Cisco). I have successfully connected the iPhone to our ASA 5520. The iPhone can access to different services correctly, however once I want connect another IPSec client (PC with windows, or a mac or an another OS) while the iPhone still has a connection then the IPSec traffic will only flow in one direction. When the iPhone is disconnected then the traffic will start to flow correctly.

in brief, it's not possible to establish a new IPSec tunnel with a VPN client as long as a iPhone 2.0 client is connected on the ASA.

Someone have an idea?

Thank you for your help.

Bests Regards

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
a.alekseev Tue, 07/22/2008 - 01:02

You gave a description, give the details

Try to use different groups for iPhone 2.0 clients and others...

s.fasel Tue, 07/22/2008 - 04:25

I have found the solution....

Apparently, there is a bug with the mask of the address pool.

I used a mask and it didn't work.

I create a address pool with a mask

Now when a IPhone 2.0 is connected to my ASA, all VPN client can also connect correctly (IPSEC traffic in both directions is ok).

Is this a known bug?

Thank you


This Discussion