Recently I had a situation where customer asked me to configure remote access VPN on his old Cisco 871. Configuration was quite simple but I had problem with connecting iPhone to his network.

The solution is quite simple: apparently Apple doesn’t like 3des so I had to configure transformset like this:

crypto ipsec transform-set myset esp-aes 256 esp-sha-hmac