[Openswan Users] Trying to Get iPhone to Ubuntu VPN Working with OpenSwan

[Paul Wouters]

On Sat, 23 Apr 2011, Dan wrote:

> I made the three changes you suggested and it is actually working now!  This is so gratifying after investing so much time in this to have finally gotten it working.

Great!

> 1) It takes 40 seconds to download a 3.1 MB mp3. Once I get around to setting up media streaming, I think this will be fast enough, but I'm wondering if there's any way to speed it up.  Should I raise the xl2tpd's MTU setting?  Or would that cause problems?  Maybe 3 MB per 40 seconds is as fast as AT&T 3G gets. I'm not too sure.

I'd check some speed tester application with and without the tunnel up. I don't
think the tunnel is costing you much overhead.

> 2) I have all along been experiencing the behavior in OpenSwan that I think is a documented bug:  When I disconnect my iPhone from the VPN, I need to restart it with /etc/init.d/ipsec restart before I'm able to reconnect.  Is there a known fix to this?  I actually have an idea on how I can set up a password-protected URL to remotely restart it, so in a pinch, I can get that working, but obviously a proper fix would be ideal.

That's a known apple bug, and should be resolved if you use openswan 2.6.33 and xl2tpd 1.2.8

Paul