iOS VPN on-demand setup?

Help
1

hii community

I try to set up a VPN on demand on my iphone, but unfortunately I can not get it to work. Has anyone come to work? would be cool if the connection is always on and you do not lose the connection.

http://www.codingmerc.com/blog/ios-vpn-on-demand-profile-with-openvpn/

I try it after this guide but find this 3 cert. Not:

openVPN.crt is the client certificate

openVPN.key is the client secret key
matching the certificate

server.crt is the server certificate

would be great if someone can help me there or has another solution.

Thank you so much!

2

If you have not read this, it may help you (section on IOS clients).

3

I'm using the OpenVPN Connect app. On my Raspberry I installed PiVPN (in addition to DietPI) which lets you create ovpn keys with the pivpn add command which you can import in that app.

However, in order to make everything work more things are necessary.

  1. You need a public DNS name from a DynDNS provider which must be added to your router in order to use a static IP address for PiVPN.

  2. You have to open port 1194 UDP in your router for the IP address of your Pi-hole.

  3. In /etc/openvpn/server.conf you have to add the line

    push "dhcp-option DNS xxx.yyy.zzz.aa"

    where the latter is the IP address of your Raspberry/Pi-hole.

  4. in /etc/dnsmasq.conf you have to add

    listen-address=127.0.0.1, xxx.yyy.zzz.aa, 10.8.0.1

10.8.01 is the default address of the VPN interface.
5. Restart openVPN and pihole-FTL by executing

sudo systemctl restart openvpn
sudo systemctl restart pihole-FTL
4

@jfb if I want to access with filezilla on the folder pki is always:

Directory / etc / openvpn / easy-rsa / pki: permission denied ...

How can I access the folder?

@pi-user thanks, my raspi with vpn runs great. only my iphone loses the connection from time to time and I must then always reconnect myself. that's annoying :slight_smile: that's why I'm trying out on demand, or at least try it: D

5

@Mike1: In the settings of the OpenVPN app I chose "Seamless Tunnel" and "Continuously retry" under "Connection Timeout". Works great for me. Hope that helps!

6

Just in case you're running DietPi: It comes with its own ssh server which doesn't work with FileZilla. I replaced it with openSSH and now it works flawlessly.

7

i will test. have you reconnect on wakeup on and layer 2 reachability? thank you! :slight_smile:

8

Yes, I have.

Sorry, I don't know what that means :hushed:

9

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.