Authentication Failed error from JunOS Pulse iPhone

[tengelhardt_]

Hello,

i try to configure a connection from an iOS-Device to our SA-2000 using certificate authentication. But i don't find a step by step document which tells me what i have to prepare on the SA-2000 to get this connection work.

I've tried it with this manual 'Mobile Device Integration Giude', but there are advices related to certificates.

I think the certificates on my iOS-Devices are ok, but i suppose that the SA-2000 doesn't notice that there is a client, which wants to connect via certicate authentication.

Please, ist it possible told which steps i have to do on the SA-2000 to prepare the machine to accept connections via certifecate authentication.

SA-2000: 7.1R2 (build 18193)

Junos Pulse Client: 2.1

iOS: 4.3.5

iPhone Configuration Utility: 3.3

Thanks for help.

Greetings,

T. Engelhardt

[zanyterp_]

Does certificate authentication work from your PCs? in the IVE OS admin guide you will follow the instructions for configuring a certificate server; see summary below: 1) Upload the root certificate you will be using at System>Configuration>Certificates>Trusted Client CAs 2) Create a new auth server of type certificate (Authentication>Auth Servers>certServerType>New, provide name and the format for the username 3) Create a new realm and set it to use the certificate server (Users>User Realms>New Realm>nameTheRealm 4) Create the role mapping rules desired 5) Assign the realm to a sign-in policy (Authentication>Signing In> Sign-in Pages)

[tengelhardt_]

Hello,

thank you for your help.

The certificate-server is now running on our SA-2000 and we can access to our local network using the junos pulse clients on our iOS Devices.

Thomas Engelhardt

[billiam_]

Hi

I had exactly the same issue with onDemand connections from the Pulse client. This is now fixed in 7.1R4.0 as can be seen in the release notes. If your role didn't have WSAM or JSAM enabled then onDemand VPN failed, who knows why?

Hope this helps others resolve their onDemand issues.

Cheers

Will