Dear Pieter,

Actually i am using the built-in Ipsec client, no i didnt import the root
certificate . i am trying very hard to find any document that shows how to
do this. and i cant find any useful one. No clear documentation about this
feature. i have imported the certificate .pfx from the CA Server directly
to the phone and while create the certficate, i have added the attribute
san:dns=192.168.1.254 where this is the Ip of the outside interface.

Please if you have any hints or clue on how to do it, i appreciate it.



On Fri, Apr 5, 2013 at 12:19 AM, Pieter-Jan Nefkens <
[email protected]> wrote:

>  Hello Ziad,
>
>  Have you added the root CA certificate to your iphone in a profile?  Are
> you using anyconnect ipsec or the iOS built-in VPN client? If the first,
> you would have to import the root CA certificate into the anyconnect app as
> well
>
>
>  PJ
>
>  On 4 apr. 2013, at 18:34, ziad kassab <[email protected]>
>  wrote:
>
>  Dears,
> i m trying to do Remote access VPN (IPSec) on ASA with CA Server on my
> iphone. it is not working and i am getting the error message could not
> validate server certificate. Anyone faced this issue before? is there any
> attribute that should be added?
> Thanks in advance.
>  _______________________________________________
> For more information regarding industry leading CCIE Lab training, please
> visit www.ipexpert.com
>
> Are you a CCNP or CCIE and looking for a job? Check out
> www.PlatinumPlacement.com
>
>
>       ---
> Nefkens Advies
> Postbus 721
> 4200 AS Gorinchem
>
>  Tel: +31 183 722 095
> GSM: +31 643057746
>
>  Email: [email protected]
> Jabber: [email protected]
> Web: http://www.nefkensadvies.nl/
>
>  *** Nefkens Advies steunt Alpe d'huzes. Steunt u ons ook? ***
> http://deelnemers.opgevenisgeenoptie.nl/teams/nefkens-advies/
>
>
_______________________________________________
For more information regarding industry leading CCIE Lab training, please visit 
www.ipexpert.com

Are you a CCNP or CCIE and looking for a job? Check out 
www.PlatinumPlacement.com

Reply via email to