Enabling VPN On Demand for VPN Connections

If you're using a VPN type that uses certificates for authentication, or if you're using Cisco AnyConnect or Jupiter SSL, you can set up the VPN On Demand feature to make the iPad or iPhone automatically establish a VPN connection when the user tries to access a domain or host on a list you supply. This feature is great for making sure that the iPad and iPhone always use VPN connections for connecting to your corporate network.

To set up VPN On Demand, select the Enable VPN On Demand check box in the VPN pane. Then follow these steps to build the list of domains and hosts for which you want to control VPN connections:

1. Click the + (Add) button at the lower-left corner of the Domain And Host Names That Will Establish A VPN list box. iPhone Configuration Utility adds an Untitled entry to the list.
2. In the Match Domain Or Host column, type the domain name or host name.
3. Open the corresponding pop-up menu in the On Demand Action column, and choose the appropriate setting:
   • Always Establish: Choose this setting to make the iPad or iPhone establish a VPN connection for the host or any address in the domain.
   • Establish If Needed: Choose this setting to make the iPad or iPhone try a DNS lookup for the host or domain and establish a VPN connection if the lookup returns no match.
   • Never: Choose this setting to prevent the iPad or iPhone from establishing a VPN connection for the host or domain. If the iPad or iPhone has already established a VPN connection, it can use the connection for this host or domain.
4. Repeat those three steps as needed to add other hosts and domains to the list. If you need to remove a host or domain, click it in the list, and then click the - (Remove) button.

Setting Up Proxying for the VPN Connection

If the VPN uses a proxy server, go to the Proxy Setup area at the bottom of the VPN pane and follow these steps:

1. Open the Proxy Setup drop-down list or pop-up menu and choose Manual or Automatic, as needed.
2. Specify the information needed:
   • Manual Proxy Setup In the Server text box, type the proxy server's hostname or IP address. In the Port text box, type the port number-for example, 80, 8080, or 8000. If you're setting up the profile for a single user, enter the username in the Authentication text box and the password in the Password text box. Otherwise, leave these text boxes blank so that the user is prompted to fill in their information.
   • Automatic Proxy Setup Type the proxy server's URL in the Proxy Server URL text box.

NOTE: After you finish setting up a VPN connection, you can start creating another if necessary. Click the + button in the upper-right corner of the VPN pane to start creating a new VPN connection, and then provide the information as discussed in the preceding pages.