Remote Access VPN doesn´t allow connection from mac mobile devices when service-type remote-access commando applied to a username

[alexdelangel]

Hello friend´s

I got a remote access vpn profile working pretty cool with windows, mac laptops and android devices.

I am unable to start a vpn connection with iphones and ipad, because the next parameter on the local database of usernames on the ASA:

username AAAAA password Gx0NUFDlwS66ucZE encrypted
username AAAAA attributes
 service-type remote-access

when I remove service-type remote-access command I am able to start the vpn session. I can´t allow this, because then these users would be able to start an SSH or ASDM session to the ASA.

Any idea about it? Please, feel free to request as much information as needed. Any comment or documentation will be appreciated.

Regards!

[Vishnu Sharma]

Hi Alex,

I have a couple of questions to understand the problem better. Please help me with the answers so that I can help you.

1. What type of VPN are you using? IPSec or Anyconnect?

2. What is the version of VPN Client on your IPAD (Non Working) and on your MAC(Working)?

3. Do you get any error message when you connect from Ipad? If yes, please share the screenshot. 

4. What is the version of firmware on your ASA?

Once I have these information, I will be able to guide you in proper direction.

Thanks,

Vishnu Sharma