IOS IKEv2 VPN over LTE does not work anymore

[kris2k]

I’ve read the recent posts about people affected by usage NordVPN complaining, but in my case, it’s my personal network and my internal users.

I’ve ran through the preliminary details and it appears that the phone is initiating a direct IPV6 tunnel that’s superseding the device’s routing table and not allowing the device to use the IPv4 or IPv6 gateways provided by the VPN tunnel (our IPSec tunnel is dual-stack) which are provided by the device’s routing table.

What’s up with this?

Any recommended IOS profile tweaks to push down?

[kris2k]

Hey everyone!

A little bit of an update for this.  

For Apple devices: 
Apple has released the latest iOS 12.0.1 software which may resolve issues for certain remote/VPN Apps using the IPv6-only connections.

If you’re experiencing this issue, please update to iOS 12.0.1 (or newer) and test again.

A possible workaround for Android devices only:
Modify the APN “ltemobile.apn” to IPv4 instead of the default IPv4/IPv6 in the phone settings, under Wireless & Networks - Cellular Networks - Access Point Names.

Power cycle the device and test the VPN connection again.

If the issue persists, please note the date and time of the failure and let us know so we can send you a PM to look closer into this with you.

[FidoJulien]

Salut @gervais

Bienvenue sur la communauté

Je vous envoie un message privé à l'instant pour qu'on regarde ça ensemble.

À tout de suite!

[clegasse6280]

I have the same problem, it is impacting a payment application that our company is using.  Can someone contact me to solve this issue ?  Thanks,

Christophe

[FidoJulien]

Hey @clegasse6280

Welcome to the community

I'll be sending a PM your way so we can take a look at this.

Talk to you soon!

[ek66]

Hi, I also have found this issue.

I have 2 iphones, one on Fido and another on Telus with exact same applications and setups.

From several days, on Fido LTE/3G, both OpenVPN and IKEv2 VPN's connections do not work anymore.

The phone connects to VPN but it fails to web browse (by Safari) sites like google.ca.

There is a big mess on current ipv6/ipv4 Fido implementation.

Please resolve it!

[ek66]

---

@kris2k wrote: ... got fixed by Fido. It appears that they pushed an alternate APN configuration to use the dual-stack IPv4/IPv6 Gateway again. ..

Could you please explain in more details about this alternate APN and how they pushed it to (your only?) iPhone /iPad if this is not a secret?

It looks like there are still unresolved IPv4/IPv6 VPN related issues over Fido LTE/3G  Data but I cannot find any official information that confirms or rejects such suspissions.

Too bad. I spent hours to restore from backups the phone, my own VPN, routers etc. - for nothing.

With another (non-fido) SIM and service, everything works fine

Regards.

---

[FidoPamela]

Hey @ek66! 

We have replied to you in PM.  

[ek66]

Hi FidoPamela.

Thank you for taking care.

However, I don't see any PM from today.

[FidoPamela]

So sorry for the confusion @ek66! I sent you a new one now. 

Chat soon! 

[Peanut206]

Bonjour!

J’ai exactement le même problème... Est-il possible de me contacter afin de régler la situation s.v.p? Merci!!

[FidoNick]

Salut @Peanut206!

Je vous envoie un message privé!