Support Center > Search Results > SecureKnowledge Details

Print Email
Configuring Native L2TP Client on iPhone/Android to work in front of Security Gateway
Solution ID:
sk63324
Product:
o!ile "ccess # SS$ %P&
%ersion:
R'()3*
Date Created:
*(+,un+2*((
$ast odi-ied:
(*+,an+2*(2
Did this solution solve your ro!le"#
.Click on the stars to
rate/
S$L%T&$N
Gateway Configuration
To configure the L2TP Suort for the gateways'
() 0na!le $21P on the speci-ic gatewa2: 345atewa2 Properties > IPS0C %P& > Re6ote "ccess47 Select 8Support $21P8
check!o9:

2) $21P re:uires ;--ice ode de-inition -or the Securit2 5atewa2: 45atewa2 Properties > Re6ote "ccess > ;--ice ode4)
De-ine:
Configuring Native L2TP Client on iPhone/Android to work in front of Se... https://supportcenter.checkpoint.co/supportcenter/portal!eventSu"it#...
$ of % 2&/'2/2'$2 '(:2) p..
"llow ;--ice ode to all users 3or to a speci-ic group7)
De-ine the ;--ice ode 6ethod) i)e) 8anual 3<sing IP pool78 and de-ine the ;--ice ode network pool addresses:
Con-igure the D&S ser=er o- the organi>ation and its do6ain su--i9 in the 8IP Pool ;ptional Para6eters8 window:

? @or 6ore o--ice 6ode con-igurations 6ethods and options go to the %P& 5atewa2 "d6in guide)
Configuring Native L2TP Client on iPhone/Android to work in front of Se... https://supportcenter.checkpoint.co/supportcenter/portal!eventSu"it#...
2 of % 2&/'2/2'$2 '(:2) p..
3) Con-igure a glo!al Pre+Shared ke2: 45lo!al Properties > Re6ote "ccess > %P& "uthentication > Support $21P with
Pre+Shared ke24:
Note' @or Securit2 5atewa2 =ersions !e-ore R'( there was no 5<I -or con-iguring the Pre+Shared ke2)
It was con-igured in a -ile calls l2tp)con- on the Securit2 5atewa2 under A@BDIR#con-)

iPhone Configuration
To configure L2TP on the iPhone'
@ro6 2our iPhone ho6e screenC go to 4Settings > 5eneral > &etwork > %P& > "dd Con-iguration4) ()
In the $21P page: Pro=ide 2our %P&+( ser=er @DD& 3D&S na6e7 or IP addressC 2our user na6eC and the glo!al
shared secret:
2)
Configuring Native L2TP Client on iPhone/Android to work in front of Se... https://supportcenter.checkpoint.co/supportcenter/portal!eventSu"it#...
* of % 2&/'2/2'$2 '(:2) p..

Connecting to the (PN Security Gateway'
5o to Settings and set the %P& switch to 8;&8) 1he Password screen appears) 0nter 2our password) ()
Android Configuration
To configure L2TP on the Android device'
() 5o to de=ice4s 4Settings > Bireless E &etworks > %P& Settings > "dd %P&4 and select 8"dd $21P#IPSec PSK %P&8) 1he
-ollowing window will appear:
Configuring Native L2TP Client on iPhone/Android to work in front of Se... https://supportcenter.checkpoint.co/supportcenter/portal!eventSu"it#...
+ of % 2&/'2/2'$2 '(:2) p..

2) In the opened window:
5i=e a %P& &a6e to 2our connection 3i)e) 2%pn7) a)
In 8Set %P& ser=er8C pro=ide 2our %P&+( ser=er @DD& 3D&S na6e7 or IP address) !)
In 8Set IPSec preshared ke28C set the glo!al pre shared secret ke2) c)
Fou 6ight !e asked to enter the storage credentials) In case it is the -irst ti6e that 2ou are using the storageC 2ou
will ha=e to de-ine a new password -or it)
d)
1ap on 6enu to sa=e changes) e)
3) 1he %P& Connection will !e added to 2our %P& Settings con-iguration)
Connecting to the (PN Security Gateway'
() 5o to de=ice4s 4Settings > Bireless E &etworks > %P& Settings4 and select 2our %P& connection) 1he user na6e and
Password screen appears) 0nter 2our credentials -or authentication)
&"ortant' Be don4t reco66end using the $21P option in "ndroid due to securit2 =ulnera!ilit2 issues)
1his solution has !een =eri-ied -or the speci-ic scenarioC descri!ed !2 the co6!ination o- ProductC %ersion and
S26pto6s) It 6a2 not work in other scenarios)
Give us )eed!ack
Did this solution solve your ro!le"# .Click on the stars to rate/
Characters le-t: 2***
G2*(2 Check Point So-tware 1echnologies $td) "ll rights reser=ed)
Check Point So-tware 1echnologiesC Inc) is a wholl2 owned
su!sidiar2 o- Check Point So-tware 1echnologies $td)
"dditional co66ents)))3a9 2*** characters allowed7
Configuring Native L2TP Client on iPhone/Android to work in front of Se... https://supportcenter.checkpoint.co/supportcenter/portal!eventSu"it#...
% of % 2&/'2/2'$2 '(:2) p..