Hi, after discussing in private e-mail, the issue could be solved:
On Sun, Apr 08, 2012 at 10:52:59AM +0200, Marc Haber wrote: > crypto isakmp client configuration group InternClient200910 > key <snip> > dns 10.1.2.11 10.1.2.45 > domain internal.example > pool ippool > acl DefaultrouteTunnel The iPad chokes on Shared Keys that contain double quotes (substituted them with a different special character), and doesn't like a split-tunnel ACL on the configuration, even if it is an "permit any any" ACL. Removing that fixed things as well. In practice, I left the InternClient200910 configuration group alone and established a new InternIpad201204 configuration group with a key that doesn't have double quotes and without a split tunnel ACL. The missing split tunnel ACL means losing some functionality, but I didn't manage to do it any better. Greetings Marc -- ----------------------------------------------------------------------------- Marc Haber | "I don't trust Computers. They | Mailadresse im Header Mannheim, Germany | lose things." Winona Ryder | Fon: *49 621 31958061 Nordisch by Nature | How to make an American Quilt | Fax: *49 621 31958062 _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
