We use cookies on our website to ensure we provide you with the best experience on our website. By using our website, you agree to the use of cookies for analytics and personalized content.This website uses cookies. More Information
It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda CloudGen Firewall

How to Configure the Apple iOS VPN Client for IPsec Shared Key VPN

  • Last updated on

To use an Apple iOS device to connect to a client-to-site IPsec VPN without having to import a certificate, use shared key authentication.



Configure the Apple iOS Device

Before you configure the Apple iOS device:

  • Verify that the Apple device is running iOS version 5.1 or above.

    Barracuda Networks reference device for IPsec PSK: Apple iPhone/iPad with iOS version 7.0.4.

  • Verify that a client-to-site IPsec VPN with shared key authentication has been properly configured.

To configure an Apple iOS device for IPsec VPN connections with the CloudGen Firewall:

  1. On the Apple iOS device, tap Settings > General > VPN > Add VPN Configuration.
  2. On the Add VPN configuration screen, tap the IPSec tab.
  3. Configure the following settings:
    • Server – The IP address or FQDN that the VPN service is listening on (e.g.,
    • Account and Password – Your username and password.
    • Group Name – The access policy name for the client-to-site VPN on the firewall you want to connect to (e.g., IPsecVPN).
    • Secret – The shared key. 
  4. Tap Save in the top-right corner. The VPN configuration then appears on the VPN screen.


Connect to the VPN with the Apple iOS Device

After configuring the Apple device, you can connect to the IPsec VPN.

On your Apple iOS device, tap Settings and then turn on VPN. After a few seconds, the VPN icon appears in the status bar to indicate that the connection is successful.

Establishing VPN through NAT can be problematic. If you experience connection losses, increase the UDP timeout on the NAT'd device. For example, the iPhone sends keepalive packets every 60 seconds. To increase the UDP timeout for the iPhone, enter any value over 60 seconds.

Unfortunately, many cell phone providers use NAT to connect mobile devices to the Internet. Contact your cell phone provider support for help.

Last updated on