Protocol Supported for VPN for Iphone and Ipod touch

Summary

This article covers the basics about the VPN protocols that iPhone and iPod touch support. For making sure VPN is properly configured to work with iPhone or iPod touch, you should contact your network administrator or IT Department. You also might want to refer them to this article.

iPhone and iPod touch work with VPN servers that support the following protocols and authentication methods:
VPN Type User / Machine Based Authentication Authentication Method(s) Supported
L2TP / IPSec User MSChapV2 Password
RSA SecurID
CRYPTOCard
Machine Shared Secret
PPTP User MSChapV2 Password
RSA SecurID
CRYPTOCard
Cisco IPSec VPN* User Password
RSA SecurID
CRYPTOCard
Certificate
Machine Shared Secret
Certificate



iPhone and iPod touch can use certificates in the following raw formats*:

* PKCS1 (.cer, .crt, .der)
* PCSC12 (.p12, .pfx)

Products Affected
iPhone, iPod touch, iPhone 3G, iPhone 3GS, iPod touch (2nd generation)

If you are successfully using VPN in Mac OS X with a L2TP/IPSec configuration and you are using Password, RSA SecurID, or CRYPTOCard User Authentication methods, and Shared Secret key for Machine Authentication, then the same VPN configuration should work on iPhone or iPod touch. In addition, if you are using a Shared Secret key or Certificate for Machine Authentication, it should work as well.


Or, if you are successfully using VPN in Mac OS X with a PPTP configuration and you are using the Password, RSA SecurID User Authentication, or CRYPTOCard method, then the same VPN configuration should work on iPhone. The other User Authentication methods are not supported by iPhone or iPod touch.

If you have questions about what your VPN settings are or what your Shared Secret key is, you should contact your network administrator or IT Department.

For more information on how to set up and use VPN, see the  iPhone Enterprise Deployment Guide: 

* Requires iPhone OS 2.0 or later