Home / server / Questions / 293159
Accepted
Banjer
Asked: 2011-07-23 10:14:52 +0800 CST

L2TP VPN routing issue with iphone/ipad

  • 772

I am able to connect to our company's VPN with L2TP on the iphone and ipad, however, I can only get to certain resources in our company network but not others.

After looking at the iOS device logs and routing tables, it seems that only the first 30 routes from our topology are seen on the iOS device. We are running a Checkpoint (R75) firewall.

Is there a limitation on the # of routes that can be saved in a routing table in iOS, or it some kind of limitation of L2TP in general? Any other troubleshooting ideas are welcome. Thanks.

vpn checkpoint l2tp apple-ios

2 Answers

  1. I find it more likely that this is related to your firewall rules. I might double check that you aren't only letting stuff route to a certain subnet, or range or group that was created in your network. I might also double check this.

    I've setup L2TP connections to iPhones and iPads using sonicwall, but I've never had to setup connections to over 30 devices. Where are you finding the log files on your iOS device? Could you post the contents of the log?

    • 2
  2. Best Answer

    Per another conversation I'm having in a Checkpoint forum:

    L2TP only allows for 30 routes. If your encryption domain is more than 28 subnets you will have issues with anyone's L2TP client.

    I'm having trouble confirming that, but makes sense from what we're seeing.

    EDIT: Recent post on Checkpoints website states that 28 is in fact about the max # of subnets that can be seen by L2TP clients.

    • 1