I have been using OpenVPN to connect to a DDWRT router for several years now with no problems. Recently, I decided to try to use the On Demand feature so that I would no longer need to open the OpenVPN app to connect each time I needed to connect to the local network. This has seemed more difficult than I had hoped. Here are the details...
- 1. I am using the iPhone Configuration Utility (on windows) to configure the "Custom SSL" connection using the various instructions I have found in these locations:
http://simonguest.com/2013/03/22/on-dem ... n-for-ios/
https://docs.openvpn.net/docs/openvpn-c ... s-faq.html
http://www.derman.com/blogs/iOS-OpenVPN-OnDemand-Setup
2. I have successfully set up a manual connection using the VPN configuration setup using the iPhone Connection Utility (IPCU). This requires me using an additional key called "vpn-on-demand" with a value of 0. I then need to open the VPN app, manually select the certificate imported with the IPCU, and am able to successfully connect.
3. Unfortunately, when I try to change this configuration to an On Demand configuration by checking the "On Demand" option, adding the desired on demand local ip addresses, and deleting the "vpn-on-demand" key (or changing its value to 1 - I've tried both), I am unable to get a connection.
4. I am using IOS 8.1 and the IPCU logging function from what I understand is incompatible.
- 1. I am attempting to connect by putting the desired local IP address in the safari address bar. I don't see any indication that the OpenVPN app is active or trying to connect, just the standard address not found from Safari. Should I see the VPN indication at the top of the screen like I do when I connect normally?
2. When I have success using the IPCU transferred configuration without the On Demand feature, I have to manually select the PKCS#12 certificate. Is this normal for the configuration transferred from the IPCU or might it indicated that the certificate for some reason is not being transferred correctly?
3. An additional observation with the IPCU - When I set up a "Custom SSL," this remains until I leave IPCU or reimport a configuration at which point it becomes an "OpenVPN" configuration. The "CustomSSL" and its settings are no longer available in IPCU. Is this the normal behavior for IPCU and, if so, does it mean I need to reconfigure the "Custom SSL"? I assume those original settings are still saved in the configuration file but can no longer be changed or edited without exporting and manually editing the configuration file.
Andy