Linode Forum
Linode Community Forums
 FAQFAQ    SearchSearch    MembersMembers      Register Register 
 LoginLogin [ Anonymous ] 
Post new topic  Reply to topic
Author Message
 Post subject: iPad & VPN
PostPosted: Sat Aug 25, 2012 7:56 am 
Offline
Senior Newbie

Joined: Wed Feb 24, 2010 2:08 pm
Posts: 16
Hi,

I have an iPad and am looking at getting a Linode (I used to have one previously) for multiple uses.

What I would like to be able to do is setup a VPN on a Linode, to which the iPad could then connect to when I'm not in the UK or an a public network.

What I would like to know is if someone has has some experience of this and what VPN service they have used on their Linode.

Thanks,


Top
   
 Post subject: Re: iPad & VPN
PostPosted: Sat Aug 25, 2012 9:30 am 
Offline
Senior Member
User avatar

Joined: Tue Jan 04, 2005 7:32 am
Posts: 277
Website: http://www.betadome.com/
Location: Ă…lesund, Norway
Skype: neonnero
Twitter: neonnero
I took the simple route and installed PPTPd on my Linode in London. And I've successfully connected my iPad to that VPN and surfed around, so I know it works.

If I remember correctly, I followed this tutorial (feel free to replace the "nano" commands with your editor of choice):
http://akensai.com/linode-vpn/


Top
   
 Post subject: Re: iPad & VPN
PostPosted: Sat Aug 25, 2012 11:00 am 
Offline
Senior Newbie

Joined: Wed Feb 24, 2010 2:08 pm
Posts: 16
Thanks. I was reading pptp wasn't as secure as openvpn (i guess open on uses l2tp or whatever it is). Also some locations such as china block pptp, so wasn't sure if to use pptp, as I had come across that article you posted earlier :)


Top
   
 Post subject: Re: iPad & VPN
PostPosted: Sat Aug 25, 2012 3:14 pm 
Offline
Senior Member
User avatar

Joined: Sun Dec 27, 2009 11:12 pm
Posts: 1038
Location: Colorado, USA
PPTP is a broken security protocol.

Originally cracked way back in 1999, with minor "fixes" over time that made it marginally "less cracked" but still not secure, and then recently totally cracked once again (via ChapCrack and other tools).

MS has no interest in maintaining MS-CHAPv2 and no security person worth there chops would even consider using it.

That said, security is always a tradeoff. How much is "good enough" depends on what you're protecting. You don't install a million dollar safe to protect a hundred thousand dollar ring.

_________________
Either provide enough details for people to help, or sit back and listen to the crickets chirp.
Security thru obscurity is a myth - and really really annoying.


Top
   
 Post subject: Re: iPad & VPN
PostPosted: Tue Aug 28, 2012 6:58 am 
Offline
Junior Member

Joined: Sat Jul 25, 2009 10:05 am
Posts: 26
I wouldn't go for pptp although as for alternatives, there is an article in the Linode Library about installing and configuring OpenVPN which would be a better choice over pptp.


Top
   
 Post subject: Re: iPad & VPN
PostPosted: Wed Aug 29, 2012 5:59 pm 
Offline
Senior Member
User avatar

Joined: Tue May 26, 2009 3:29 pm
Posts: 1691
Location: Montreal, QC
Serial Cookie wrote:
I wouldn't go for pptp although as for alternatives, there is an article in the Linode Library about installing and configuring OpenVPN which would be a better choice over pptp.


OpenVPN is nice, but it doesn't solve the OP's problem, since it's not natively supported by iOS.

Valid options are:

- PPTP
- L2TP/IPSec
- Cisco IPSec
- Juniper JunOS Pulse (via app)
- Cisco AnyConnect (via app)

The PPTP and L2TP options support RSA SecurID or CryptoCARD as an alternative to MS-CHAPv2

iOS does support third party (non-integrated) VPN solutions via an API, hence the two apps I listed. However, the API is undocumented, and only available to vendors on invitation. This is why there is no OpenVPN client despite it being technically possible without jailbreaking.


Top
   
 Post subject: Re: iPad & VPN
PostPosted: Wed Aug 29, 2012 7:09 pm 
Offline
Senior Newbie

Joined: Wed Feb 24, 2010 2:08 pm
Posts: 16
Thanks Guspaz. I'm running CentOS on m Linode, so what solution do you suggest out of pptp and l2tp and what's the name of the service I need to install on my vps? I'm not familiar with tsa and crypto.


Top
   
 Post subject: Re: iPad & VPN
PostPosted: Thu Aug 30, 2012 1:39 pm 
Offline
Senior Member
User avatar

Joined: Tue May 26, 2009 3:29 pm
Posts: 1691
Location: Montreal, QC
Unfortunately, I've never used the VPN support on iOS myself, so I can't really recommend something specifically. PPTP is likely to be blocked by most mobile carriers since it uses GRE (and not TCP or UDP); I think one of the other options is more likely to get through.


Top
   
 Post subject: Re: iPad & VPN
PostPosted: Fri Aug 31, 2012 3:58 am 
Offline
Senior Member

Joined: Sun Mar 07, 2010 7:47 pm
Posts: 1970
Website: http://www.rwky.net
Location: Earth
I've used VPN on iOS before (and android) L2TP/IPSec works well on the server side I use openswan. The downside is you're stuck to using set ports which are often blocked unless you pay to have VPN access in hotels/airports etc.

_________________
Paid support
How to ask for help
1. Give details of your problem
2. Post any errors
3. Post relevant logs.
4. Don't hide details i.e. your domain, it just makes things harder
5. Be polite or you'll be eaten by a grue


Top
   
 Post subject: Re: iPad & VPN
PostPosted: Thu Sep 06, 2012 8:29 pm 
Offline
Senior Member
User avatar

Joined: Tue May 26, 2009 3:29 pm
Posts: 1691
Location: Montreal, QC
obs wrote:
I've used VPN on iOS before (and android) L2TP/IPSec works well on the server side I use openswan. The downside is you're stuck to using set ports which are often blocked unless you pay to have VPN access in hotels/airports etc.


Using the VPN over a proxy (which seems to be supported by iOS) might mitigate that issue.


Top
   
Display posts from previous:  Sort by  
Post new topic  Reply to topic


Who is online

Users browsing this forum: No registered users and 2 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum

Search for:
Jump to:  
RSS

Powered by phpBB® Forum Software © phpBB Group