L2TP connectivity to SonicWall Firewall may fail after upgrading firmware on iPhone or iPod to
03/26/2020 3 11029
L2TP connectivity to SonicWall Firewall may fail after upgrading firmware on iPhone or iPod to iOS4
In some cases, L2TP connectivity to SonicWall Firewall fails after upgrading firmware on IPhone, IPod to iOS4. L2TP client connectivity is unaffected for devices using previous iOS versions. At this point L2TP on iPad is not affected and they might get affected once iOS4 is available for iPad.
The connectivity is only affected if WANGroupVPN policy has phase 2 Encryption set to DES/3DES. Connections succeed if phase 2 Encryption is set to AES-128/256.
SonicWall Engineering is actively working to provide a fix for all affected platforms. We will be updating this article with the details of the hot fix once it is available via Tech Support.
In the meanwhile we are posting a workaround for the connections to succeed.
Resolution or Workaround:
Use AES-128/256 for Phase 2 Encryption.
(Please note that iOS4 doesn't support AES-192)
KBID 6579: Configuring iPod/iPad/iPhone L2TP Client to connect to SonicWall UTM appliances