iPhone 不会使用 racoon 守护进程保存 Cisco IPsec VPN 密码

iPhone 不会使用 racoon 守护进程保存 Cisco IPsec VPN 密码

在我的 Debian 服务器上,我为 Cisco IPSec VPN 设置了 racoon 守护进程 (1:0.8.0-14),使用证书进行身份验证。我的 racoon.conf 如下:

log info;
path certificate "/etc/racoon/certs";

listen {
    isakmp $SERVER_IP_HERE [500];
    isakmp_natt $SERVER_IP_HERE [4500];
}

timer {
    natt_keepalive 10 sec;
}

remote anonymous {
    lifetime time 24 hours;
    proposal_check obey;
    passive on;
    exchange_mode aggressive,main;
    my_identifier asn1dn;
    peers_identifier asn1dn;
    verify_identifier on;
    certificate_type x509 "cert_name.crt" "key_name.key";
    ca_type x509 "ca.crt";
    mode_cfg on;
    verify_cert on;
    ike_frag on;
    generate_policy on;
    nat_traversal on;
    dpd_delay 20;
    proposal {
        encryption_algorithm aes;
        hash_algorithm sha1;
        authentication_method xauth_rsa_server;
        dh_group modp1024;
    }
}

mode_cfg {
    conf_source local;

    auth_source system;
    auth_throttle 3;
    save_passwd on;

    dns4 8.8.8.8;
    network4 $SOME_LAN_SUBNET;
    netmask4 255.255.255.0;
    pool_size 128;
}

sainfo anonymous {
    pfs_group 2;
    lifetime time 24 hour;
    encryption_algorithm aes;
    authentication_algorithm hmac_sha1;
    compression_algorithm deflate;
}

我这里没有使用 PSK 身份验证。使用 iPhone 配置实用程序,我已将所有必需的证书上传到 iPhone 并按需设置 VPN。除了一件事之外,一切都运行正常:iPhone 拒绝保存 VPN 密码,无论save_passwd on;racoon 配置文件中如何。与 iPhone 的行为相反,Mac OS X 10.8.2 在保存密码时没有问题。我检查了 iPhone 日志文件并发现以下内容:

racoon[151] <Notice>: >>>>> phase change status = phase 1 established
configd[50] <Notice>: IPSec Network Configuration started.
configd[50] <Notice>: IPSec Network Configuration: INTERNAL-IP4-ADDRESS = $SUBNET_IP_HERE.
configd[50] <Notice>: IPSec Network Configuration: INTERNAL-IP4-MASK = 255.255.255.0.
configd[50] <Notice>: IPSec Network Configuration: SAVE-PASSWORD = 0.
configd[50] <Notice>: IPSec Network Configuration: INTERNAL-IP4-DNS = 8.8.8.8.
configd[50] <Notice>: IPSec Network Configuration: BANNER = .
configd[50] <Notice>: IPSec Network Configuration: DEF-DOMAIN = .
configd[50] <Notice>: IPSec Network Configuration: DEFAULT-ROUTE = local-address $SUBNET_IP_HERE/32.
configd[50] <Notice>: IPSec Phase2 starting.
configd[50] <Notice>: IPSec Network Configuration established.
configd[50] <Notice>: IPSec Phase1 established.

请注意包含 的 IPSec 网络配置消息SAVE-PASSWORD = 0.。这是服务器上的 racoon 守护程序中的错误,还是 iPhone(iOS 版本为 6.0.1 (10A523))的错误,或者是我遗漏了什么?如何让 iPhone 记住 IPSec VPN 密码?

相关内容