Ask Different is a question and answer site for power users of Apple hardware and software. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

There is a question on "What is VPN on demand, and how do I get it to work with iOS?", however its accepted answer lacks detail.

Envision a small business usage with only 1 or 2 iPhone/iPad devices needing VPN on demand access. This scenario has a preference for low cost and maintenance, for example it prefers an entry level device with low power consumption, self-signed certificates with long expiry dates.

Which hardware and (specific) firmware, licenses, external certificates, modules, etcetera on the Cisco IPsec compatible routing device are needed?

To make the question more concrete, which of these Cisco VPN boxes would be sufficient?

  1. RVS4000
  2. RV180
  3. RV042

And are there step-by-step configuration setup guides, starting from how to create the Cisco IPsec authentication certificate on that device, to creating the corresponding profile in the Apple configuration utility?

share|improve this question
This question may be more on topic at Server Fault (, or at least you may get more Cisco people lurking there. – dunxd Feb 20 '13 at 16:38

A Cisco box is not required, as there is the open source StrongSwan.

Only a device that is able to run Linux (Debian, Ubuntu, etcetera) is sufficient.

FreeBSD or MacOSX are not ok as those builds only support IKEv2 only, and the iOS built in client needs IKEv1.

Here is how to setup the iOS device for StrongSwan:

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.