9

When tethering a cellular-capable iOS 10 device, the traffic from the remote machine seems to bypass the connect-as-needed VPN and go directly to the cellular network. Local iOS device traffic starts and uses the VPN as usual, but web sites visited from the remote machine see the mobile IP address, not the VPN IP address (regardless of whether the VPN is on at the time of the visit or not).

One purpose of a VPN is to shield traffic from the prying eyes of the (mobile) ISP. Is there a way to force tethered traffic through the VPN (other than by putting the VPN on the remote machine)?

|improve this question
  • Go to: settings -> general -> VPN -> info -> edit, and turn on the box labeled "Send all traffic". Does this work? – NoahL Dec 31 '16 at 21:50
  • That's not an option for my iOS 10 VPN,al though it does automatically "connect on demand" and does send all traffic (e.g., including DNS) for local iOS-originated traffic. But tethered traffic from the remote device seems to bypass the VPN entirely and gets routed to the raw cellular connection. – pseudon Dec 31 '16 at 23:48
  • Hmmm... if that's the case I think your best option is the VPN from the remote machine – NoahL Jan 1 '17 at 0:33
2

No, it seems that's not possible.

I have made several tests with different VPNs and VPN settings on my iPhone - some on demand, some not, but even when switched on manually, tethered traffic was never sent through the VPN.

I've also tried setting OverridePrimary to true as described here (it is false by default when creating the profile in the Apple Configurator), but that did not change the tethered traffic either.

The remaining solution is to install the VPN connection on your tethering client.

BTW, if that client is a Mac, you can simply import the same VPN profile by double-clicking on the mobileconfig file created for iOS.

|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .