Setting Up an iOS 7 On-Demand VPN
Aug 20, '14 07:00:00AM
Contributed by: Anonymous
I'm writing a detailed set of instructions for getting VPN 'on-demand' working with iOS 7.
A few comments about this work:
See Setting Up an iOS 7 On-Demand VPN for the details (it's way too much stuff to post via MacOSXHints, as much as I've been a fan of this site for many years).
The complete set of instructions include:
A major objective of the on demand aspect of the VPN capability is to have the a VPN connection automatically created whenever the iOS device is either only on a cellular network or on a WiFi network that's not ours (i.e., so the above requirement is automatically fulfilled).
Both the IPSec and OpenVPN configurations include setups using only user+password/account-based authentication as well as certificate-based authentication.
Although the iOS device instructions are specific to an iPhone, they also work for other iOS devices -- the user just has to find the equivalent items for the VPN settings.
Although the server side of the instructions is specific to the pfSense open source router, the setup configuration will apply to many other routers – the user will simply have to find the equivalent settings for that router/VPN appliance.
For anyone interested in a good router, read my Comments About pfSense for a strong but conditional recommendation.
One of the primary objectives was to document a setup where the VPN-connected iOS device routes all the device's traffic through our network – i.e.:
All the iOS device's traffic goes through our network and is encrypted while doing so -- so the cellular data and WiFi parts of the device's traffic can't be monitored.
All unencrypted (and normall SSL browsing, etc.) traffic emanates only from our LAN through our network's (land-based/hard-wired) router.
This gives our mobile devices the benefit of some site filters provided by our firewall appliance (another 'how to' I have planned).
[crarko adds: An ambitious project, and hopefully it should work with iOS 8 as well.]
Mac OS X Hints