iPhone and iPod touch: Supported protocols for VPN
Summary
This article covers the basics about the VPN protocols that iPhone and iPod touch support*. For making sure VPN is properly configured to work with iPhone or iPod touch, you should contact your network administrator or IT Department. You also might want to refer them to this article.
For VPN user authentication, iPhone and iPod touch support RSA SecureID and CRYPTOCard for 2-factor token authentication, and password based MS-CHAP version 2. For machine authentication, iPhone and iPod touch support Shared Secret.
Products Affected
iPhone, iPod touch
If you are successfully using VPN in Mac OS X with a L2TP/IPSec configuration and you are using Password, RSA SecurID, or CRYPTOCard User Authentication methods, and Shared Secret key for Machine Authentication, then the same VPN configuration should work on iPhone or iPod touch. In addition, if you are using a Shared Secret key for Machine Authentication, it should work as well. The other User Authentication / Machine Authentication methods are not supported by iPhone or iPod touch.
Or, if you are successfully using VPN in Mac OS X with a PPTP configuration and you are using the Password or RSA SecurID User Authentication method, then the same VPN configuration should work on iPhone. The other User Authentication methods are not supported by iPhone or iPod touch.
If you have questions about what your VPN settings are or what your Shared Secret key is, you should contact your network administrator or IT Department.
For information on how to set up and use VPN, see the iPhone User's Guide:
www.apple.com/support/manuals/iphone
*Requires iPod touch software 1.1.3 (with January Software Upgrade)