VPN protocols

• Cisco IPSec
• L2TP/IPSec
• PPTP

Authentication methods

• Password (MSCHAPv2)
• RSA SecurID
• CRYPTOCard
• X.509 digital certificates
• Shared secret

VPN Deployment Scenario
The example depicts a typical deployment with a VPN server/concentrator as well as an authentication server controlling access to enterprise network services.

1. iPhone requests access to network services (typically over a PPP connection).
2. The VPN server/concentrator receives the request and then passes it to the authentication server.
3. In a two-factor token environment, the authentication server would then manage a time-synchronized token key generation with the key server. If a certifi cate authentication method is deployed, an identity certifi cate needs to be distributed to iPhone prior to authentication. If a password method is deployed, the authentication process proceeds with user validation.
4. Once a user is authenticated, the authentication server validates user and group policies.

Learn how to integrate iPhone and iPod touch with your enterprise systems.
This guide is for system administrators. It provides information about deploying and supporting iPhone and iPod touch in enterprise environments.

System Requirements
Read this section for an overview of the system requirements and the various components available for integrating iPhone and iPod touch with your enterprise systems.

iPhone and iPod touch
iPhone and iPod touch devices you use with your enterprise network must be updated with iPhone software 2.0 or later.

iTunes
iTunes 7.7 or later is required in order to set up a device. This version is also required in order to install software updates for iPhone or iPod touch, install applications, as well as to sync music, video, or other data with a Mac or PC.

To use iTunes, you need a Mac or PC that has a USB 2.0 port and meets the following specifications.

Introduction
This document describes how to connect an iPhone/iPod Touch to the RMIT secure wireless network (RMIT-WPA). The steps to getting connected are connecting to unsecured RMIT wireless network, installing the RMIT University profile and then connecting to the secure RMIT-WPA network. Finally, proxy settings must be configured. These steps are documented in this guide.

Instructions for iPhone/iPod Touch users
2.1 Preparation
Before beginning your wireless configuration, please ensure your Novell (NDS) account is active and that the password has not expired. This is your staff ‘e’ number or your student ‘s’ number.

2.2 Connecting to RMIT wireless
It is necessary to first connect to the unsecured RMIT network so that the RMIT profile can be downloaded, enabling connection to the secure network. To connect to the unsecure RMIT network:

1. Step 1. Press the Settings icon from the home screen of your iPhone or iPod Touch.

Learn how to integrate iPhone and iPod touch with your enterprise systems.
This guide is for system administrators. It provides information about deploying and supporting iPhone and iPod touch in enterprise environments.

What’s New for the Enterprise in iPhone OS 3.0 and Later
iPhone OS 3.x includes numerous enhancements, including the following items of special interest to enterprise users.

• CalDAV calendar wireless syncing is now supported.
• LDAP server support for contact look-up in mail, address book, and SMS.
• Configuration profiles can be encrypted and locked to a device so that their removal requires an administrative password.
• iPhone Configuration Utility now allows you to add and remove encrypted configuration profiles directly onto devices that are connected to your computer by USB.
• Online Certificate Status Protocol (OCSP) is now supported for certificate revocation.
• On-demand certificate-based VPN connections are now supported.