Cisco Mobile 8.1 on iPhone with VPN

[MikeM-2468]

We've been successful in getting the iPhones to work using Cisco Mobile 8.1 for the most part.  When the iPhone is on the internal WiFi, we have no problems.  For external users, we use AnyConnect VPN.  These seem to work pretty well for most calls.  Incoming and outgoing work ok.  We see some spotty connection issues, but it hasn't been a real problem.  The issue that we're seeing is that one iPhone connected via VPN cannot complete a call to another iPhone on the VPN.  The calls go through but no voice can be heard.  The calls will work in any combination of internal WiFi and VPN as long as both are not on the VPN. There are no rules restricting traffic between VPN clients.  CUCM is 7.1.5, iOS is 4.2.1.AnyConnect is 2.4.4009.

Has anyone been successful with this configuration?

[MikeM-2468]

I'm also seeing the same problem with IP Communicator 7.0.5.0.

[Jean-Christophe Majchrzak]

Hi Mike,

In my opinion you have a routing problem. Please check if a VPN client knows the route to the other VPN client. Print route on a VPN laptop. Check gateway for the given IP range (default or static route).

Then on your internal routing equipment you must have route for your VPN ip range configured.

If I'm not wrong you cannot ask your VPN box to route traffic directly between 2 established tunnels. It must first go outside first tunnel and then revert back to VPN concentrator and enter second tunnel.

Signaling differs from RTP because it goes through the SIP proxy and not p2p, so that's why it rings.

[MikeM-2468]

Thanks for the reply.  We had resolved this a couple of hours ago.  It was an issue on the firewall with allowing communications between the VPN clients.

[Jean-Christophe Majchrzak]

Static route defined on the firewall to indicate gateway (VPN box) to the other VPN client ?

[MikeM-2468]

One command solved the problem:

same-security-traffic permit intra-interface

[don.click1]

Have any of you had any troubles where, when using AnyConnect, the iPhone app will register, but some of the services will not be availible?  We had this working for a few weeks, and recently found out that about 1/2 of the options are no longer working.  I dont have a clue how to trouble shoot this yet, but thought I would check with you guys.