VPN connects when on LAN but not via WAN

Hi Guys,
I've recently configured a VPN on my SLS. I uses the following settings:
L2TP over IPsec
PPP Authentication: Directory Services: MS-CHAPv2
Shared Secret: xxxxxxxxx
Client Information:
DNS Servers: 10.0.1.250 (my server) 10.0.1.1 (my airport extreme) - This is where I think I'm going wrong
In my SLS firewall I've open every possible port for both L2TP, PPTP and all required directory authentication ports I believe. If there are any tricky ones please let me know
I am able to successfully connect to the VPN and route all traffic to the delegated IP when on my local network. However when ever I'm away from that network - friends, work, and various other tested internet connections - I am unable to connect to the VPN.
I've ruled out the SLS firewall by turning it of for several days and trying to connect at several locations. I've checked the log on the VPN and there is no record of even an attempt to connect.
In Security of Server Preferences i have exposed the VPN on the airport extreme. I've tried both with and without port forwarding. As far as i know (correct me if I'm wrong) because I have my domain name resolving to my server then I don't need port forwarding. My DNS works for all other services on the SLS.
Any ideas at to what I might be doing wrong? Things I could try to isolate the problem?
Any suggestions would be very handy!
Best
-J

Your Airport Extreme does not contain a DNS server.
Ensure MobileMe is disabled at your Airport. That messes up VPN pass-through.
From a remote network, confirm that all of the necessary ports are open via nmap or Applications > Utilities > Network Utility or other tools.
Quadruple-check the list of ports (and preferably with a second and third technical resource), as the Apple documentation around L2TP port pass-through with Airport and Time Capsule is murky.
Ensure that you don't have the same subnet on both ends of the VPN connection as that can interfere with IP routing.
Also try testing with PPTP, in place of L2TP.
I'm in the midst of tussling with a recalcitrant VPN router myself, but that's another topic.

Similar Messages

VPN works on internal LAN, but not externally

I'm running Mac OS X Server 10.6.7 on a Mac Mini and I'm trying to set up VPN so that I can administer the server from outside the LAN. The problem is that the VPN connection works on the LAN, but I cannot connect from outside. I've tried this from an iPhone tethered connection and from my client's corporate network.
I've read some posts on this so I'll summarize what I've tried:
L2TP and PPTP configured in Server Admin
Server Preferences > VPN Service ON > IP range 10.0.1.210 to 10.0.1.220 with Shared Secret set
Client side L2TP defined as:
Server Address: server.domain.com
Account Name: <myshortname>
Authentication Settings:
Password: <myaccountpassword>
Shared Secret: <same as one set in VPN Service
Client side PPTP defined as:Everything the same exceptEncryption: Maximum
Airport Extreme port settings:
L2TP
UDP: 500,1701,4500
IP: 10.0.1.50 (the server static IP, of course)
PPTP
TCP: 1723
IP: 10.0.1.50
I'm not sure how to set protocols. Maybe someone can explain that piece that I've read elsewhere.
There's something particular about my landscape which I'll describe. I run a DSL connection to a Linksys router for SLPPP purposes (anti-throttling using Tomato MLPPP firmware). This router has an Airport Extreme in its DMZ so that the AEBs can manage the NAT for the LAN. The server sits behind the AEBs.
I have no issues with open port checks on other services that are port-forwarded through the Airport only so I know the Linksys isn't getting in the way.
Any assistance is appreciated.

Yes, that's right, except the Mac Mini is connected wirelessly (I know, not ideal for a server).
The Linksys has the static IP given by the ISP.
server.domain.com has 10.0.1.50, the static IP given by the AEBS.
When I set up the server, I left NAT on the AEBS and decided to manage its server-specific settings via Server Preferences. It seemed less disruptive to me at the time, as though I was adding a server to the existing network instead of replacing the entire network. I also wanted to retain the usage of the Guest Network feature in the AEBS and that means the AEBS has to manage the DHCP.
Not all computers here are meant to connect to the business network. They all connect to the Internet through the AEBS (I believe I set the server to manage the DNS though); however, mine logs into the Mac Mini network.
I haven't tried connecting directly to the DSL. It's difficult right now as the server has to be in a different location then the phone line. I wouldn't have a monitor there to administer the network changes. I plan on changing the phone line location during the pending renovations though.
For a one man operation with a Mac server set up in a home office, what arrangement would you recommend? We have 2x laptops (1 for business, 1 other), 3x mobile devices, and a server that doubles as a media centre.
Thanks

Reports run in LAN but not in WAN from Oracle Application Server 10g R2

Hi,
I am using Microsoft(R) Windows(R) Server 2003, Standard Edition (Version 5.2.3790 Build 3790) & Oracle Application Server 10g Release 2 (10.1.2).
I run my forms and reports in Oracle Application Server 10g Release 2 (10.1.2) successfully in client server environment. But when I run my application in WAN (our private network between different cities) then forms are run successfully but reports does not run.
i am calling reports from Forms using following code.
PROCEDURE PRINT_REP_WEB IS
RO_Report_ID REPORT_OBJECT;
Str_Report_Server_Job VARCHAR2(100);
Str_Job_ID VARCHAR2(100);
Str_URL VARCHAR2(100);
PL_ID PARAMLIST ;
BEGIN
PL_ID := GET_PARAMETER_LIST('TEMPDATA');
IF NOT ID_NULL(PL_ID) THEN
DESTROY_PARAMETER_LIST(PL_ID);
END IF;
PL_ID := CREATE_PARAMETER_LIST('TEMPDATA');
RO_Report_ID := FIND_REPORT_OBJECT('REPORT183');
SET_REPORT_OBJECT_PROPERTY(RO_Report_ID, REPORT_FILENAME, 'C:\cheema\qdir_store\reports\pmms\backlog_jobtype.RDF');
SET_REPORT_OBJECT_PROPERTY(RO_Report_ID, REPORT_COMM_MODE, SYNCHRONOUS);
SET_REPORT_OBJECT_PROPERTY(RO_Report_ID, REPORT_EXECUTION_MODE, BATCH);
SET_REPORT_OBJECT_PROPERTY(RO_Report_ID, REPORT_DESTYPE, FILE);
SET_REPORT_OBJECT_PROPERTY(RO_Report_ID, REPORT_DESFORMAT, 'PDF');
SET_REPORT_OBJECT_PROPERTY(RO_Report_ID, REPORT_SERVER, 'rep_pap_10gasmid');
Str_Report_Server_Job := RUN_REPORT_OBJECT(RO_Report_ID, PL_ID);
Str_Job_ID := SUBSTR(Str_Report_Server_Job, LENGTH('rep_pap_10gasmid') + 2, LENGTH(Str_Report_Server_Job));
Str_URL := '/reports/rwservlet/getjobid' || Str_Job_ID || '?server=rep_pap_10gasmid';
WEB.SHOW_DOCUMENT(Str_URL, '_SELF');
DESTROY_PARAMETER_LIST(PL_ID);
END;
when clients in WAN press the reports button from Form there is a message "Page can not be displayed" appear.
How can I run my reports in WAN, please suggest me solution.

This sounds like a configuration issue. Are there different firewall rules that are enforced on WAN connections versus LAN connections?
Hope this helps.
Craig...

Enqueue works fine Dequeue works when run manually but not via Notification

Hi,
My Enqueue works fine. My Dequeue procedure works fine when run manually. But when I register a notification the procedure is not called.
The log file shows:
ORACLE_HOME = /u01/app/oracle/product/10.2.0
System name: Linux
Node name: gooch.com
Release: 2.4.21-50.ELsmp
Version: #1 SMP Tue May 8 17:18:29 EDT 2007
Machine: i686
Instance name: xml
Redo thread mounted by this instance: 1
Oracle process number: 25
Unix process pid: 7761, image: [email protected] (J000)
*** 2010-03-06 14:09:22.167
*** ACTION NAME:() 2010-03-06 14:09:22.167
*** MODULE NAME:() 2010-03-06 14:09:22.167
*** SERVICE NAME:(SYS$USERS) 2010-03-06 14:09:22.167
*** SESSION ID:(145.99) 2010-03-06 14:09:22.167
Error in PLSQL notification of msgid:8128C090A10BE480E0407E0A660F1B97
Queue :"XML4"."TEST14_Q"
Consumer Name :TEST14
PLSQL function :xml4.test14_proc
: Exception Occured, Error msg:
ORA-00604: error occurred at recursive SQL level 2
ORA-06550: line 1, column 7:
PLS-00306: wrong number or types of arguments in call to 'TEST14_PROC'
ORA-06550: line 1, column 7:
PL/SQL: Statement ignored
my code is
BEGIN
DBMS_AQADM.CREATE_QUEUE_TABLE(
     queue_table        => 'test14_t',
     comment            => 'Queue Table to process incoming ORDER XML messages from Management Dynamics',
     multiple_consumers => TRUE,
     queue_payload_type => 'SYS.XMLTYPE',
     compatible         => '8.1');
END;
BEGIN
DBMS_AQADM.CREATE_QUEUE(
    queue_name => 'test14_q',
    queue_table => 'test14_t');
END;
BEGIN
dbms_aqadm.start_queue('test14_q');
END;
BEGIN
DBMS_AQADM.ADD_SUBSCRIBER (
     queue_name => 'test14_q',
     subscriber => SYS.AQ$_AGENT('test14', NULL, NULL)
END;
CREATE or replace PROCEDURE test14_proc AS
deq_opts dbms_aq.dequeue_options_t;
mess_prop dbms_aq.message_properties_t;
mess_handle RAW(16);
message XMLTYPE;
buffer varchar2(100);
msglen number;
begin
deq_opts.wait := dbms_aq.FOREVER;
deq_opts.consumer_name := 'test14';
dbms_aq.dequeue(queue_name=> 'test14_q',
                  dequeue_options => deq_opts,
                  message_properties => mess_prop,
                  payload => message,
                  msgid => mess_handle);
commit;
insert into testxml values(message);
commit;
insert into hello select extractvalue(xml1, '/Hello') from testxml;
commit;
end test14_proc;
DECLARE
queue_options DBMS_AQ.ENQUEUE_OPTIONS_T;
message_properties DBMS_AQ.MESSAGE_PROPERTIES_T;
message_id RAW(16);
message SYS.XMLType;
BEGIN
message := sys.XMLType.createXML('<?xml version="1.0"?><Hello>Test</Hello>');
DBMS_AQ.ENQUEUE( queue_name => 'test14_q',
                   enqueue_options => queue_options,
                   message_properties => message_properties,
                   payload => message,
                   msgid => message_id);
COMMIT;
END;
BEGIN
DBMS_AQ.REGISTER (
      SYS.AQ$_REG_INFO_LIST(
        SYS.AQ$_REG_INFO(
          'xml4.test14_q:test14',
           DBMS_AQ.NAMESPACE_AQ,
           'plsql://xml4.test14_proc?PR=0',
           HEXTORAW('FF'))),1);
END;Any ideas?
Thanks in advance!

I actually changed it to process RAW as well i.e.
BEGIN
DBMS_AQ.REGISTER (
      SYS.AQ$_REG_INFO_LIST(
        SYS.AQ$_REG_INFO(
          'xml4.test14_q:test14',
           DBMS_AQ.NAMESPACE_AQ,
           'plsql://xml4.test14_proc?PR=0',
           HEXTORAW('FF'))),1);
END;and it still is failing with the same error

My mac mini will connect via airport but not via ethernet.

I have had a mac mini for several months which I connect via ethernet because it is in a part of my house where the wireless signal is poor. I changed ISP and now I can connect to the router wirelessly but not via ethernet. This doesn't seem to be a problem with the network as the connection works when I connect it to my mac book. Firewall is turned off. There were no major changes to the router settings other than changing the ISP login codes.
Any ideas? Is this a configuration issue or a hardware problem?

Hi Mick,
If your router only supports 10/100 ethernet then it is possible that the auto-detect feature is not working properly to adjust to that speed. The mini has a Gigabit ethernet port. The OS by default sets the port to automatically negotiate the rate but it does not always work and the result is the problem you are having.
To fix it you wlll have to manually set the rate to 100.
To do this, open your system preferences, Select Network. Highlight the ethernet port on the sidebar, click the advanced button. Click on the Ethernet Tab, set the configure pop-up menu item to 100baseTX and click the ok button. If all works out you should see that the Ethernet port icon should turn green.
Hope this helps.

Why do applications (Illustrator, Pages, Mail) launch so slowly with spinning ball (about a minute to 90 seconds) when Mac is connected to our LAN, but when I disconnected Mac from the LAN, those applications launch instantly and function normally?

I hope I'm submitting this properly, I apologize if this irritates anyone because of improper etiquette. Why do applications (Illustrator, Pages, Mail) launch so slowly with spinning ball (about a minute to 90 seconds) when Mac is connected to our LAN, but when I disconnected Mac from the LAN, those applications launch instantly and function normally? This is a condition which seemed to start just recently and abruptly. These applications reside on, and are launched from the startup drive, not from a network drive. Also, we have a NAS drive on the LAN that we connect to that also takes a minute or two to mount, when it used to (before this problem) mount on the desktop in a matter of about 5 seconds. We have three identical Mac Pros on the LAN, and they all have this problem when launching and using the above mentioned applications. When I physically unplug the network cable from the Mac, all applications launch instantly and function normally. I know very little about networks, so I can't begin to test or change any setting pertaining to our network - if that is where the problem lies. The only recent change to our network situation is that we lost or our internet and phone service due to massive flooding here in Minot, North Dakota (our ISP tells us the communication lines are under water and shorting out). But shouldn't our LAN still function even though we have lost our connection to the outside world? Thanks so much, in advance, for helping me solve this problem. Sheldon.

Hi there.
A slow LAN can have many things so its going slow.
1) is your lan 1gbit speed? (full duplex)
2) are the macs also 1Gbit speed? (full duplex)
3) does your nas has a firewall? (so you can see what the mac asking there)
4) on the macs is the firewall on? (does the programms can pass the fw?)
5) how big is the nas and how many files/dirctorys are on the nas? (big folders speeds down )
many questions, but sometimes there is a solution.
regards tim

Why do headings turn Chinese when I access my email via Firefox but not via Internet Explorer?

Why do headings turn Chinese when I access my email via Firefox but not via Internet Explorer?

hello, this is a displaying flaw caused the mcafee site advisor extension - please try to disable or remove that in case you have it present until there is an update by mcafee that can fix the problem.
http://service.mcafee.com/faqdocument.aspx?id=TS100162
https://community.mcafee.com/thread/76071

Firefox throws "This Connection is Untrusted" when using hostname, but not when using IP address

I am remotely accessing a website which has iFrame in it. The website uses https, but iFrame tag has "src" pointing to a site using http only. However, when I remotely go to the site, iFrame shows the message below although the ''src" url is http only (there is no SSL certificate) when I use IP address (https://10.10.101.156:8006/apprecovery/admin/Core/Storage) in address bar instead of hostname (https://hostname:8006/apprecovery/admin):
===
This Connection is Untrusted
You have asked Firefox to connect
securely to d37t50w1, but we can't confirm that your connection is secure.
Normally, when you try to connect securely,
sites will present trusted identification to prove that you are
going to the right place. However, this site's identity can't be verified.
What Should I Do?
If you usually connect to
this site without problems, this error could mean that someone is
trying to impersonate the site, and you shouldn't continue.
d37t50w1 uses an invalid security certificate.
The certificate is not trusted because it is self-signed.
(Error code: sec_error_ca_cert_invalid)
===
Why is it giving this when using hostname but not when IP address is using?

Corrected first para above:
I am remotely accessing a website which has iFrame in it. The website uses https, but iFrame tag has "src" pointing to a site using http only. However, when I remotely go to the site, iFrame shows the message below although the "src" url is http only (there is no SSL certificate) when I use hostname address (https://<hostname>:8006/apprecovery/admin) in address bar. But I dont see the message in iFrame when I instead use IP Address (https://<IP Address>:8006/apprecovery/admin) to go to main website.

A website will open via wifi but not via 3G. Is this a setting on the iPad?

A website will open via wifi but not via 3G. Is this a setting on the iPad?

Probably not. How's your 3G connection? I ask because I've had issues when the 3G connection isn't strong. Same with WiFi too, actually.

Old Macbook connects to corporate ethernet --- but not my new Macbook Pro

I've now tried nearly everything to solve this problem: My old white plastic Macbook connects to the corporate LAN --- but not my new mid-2009 Macbook Pro.
All the settings are the same. I have on occasion managed to connect the new Macbook Pro to the network but only for a short time.
Our IT folks have checked the cable, the ports,routers etc and everything is just fine.
I am able to connect to the network from other ports in the office --- but not from my office (except with the old white plastic Macbook).
Please, can someone help?

Fishbair wrote:
I've now tried nearly everything to solve this problem: My old white plastic Macbook connects to the corporate LAN --- but not my new mid-2009 Macbook Pro.
All the settings are the same. I have on occasion managed to connect the new Macbook Pro to the network but only for a short time.
Our IT folks have checked the cable, the ports,routers etc and everything is just fine.
I am able to connect to the network from other ports in the office --- but not from my office (except with the old white plastic Macbook).
Please, can someone help?
If you can connect when using other ports in your office the problem is almost a certainty that the issue is with the port you can't connect with. Did your IT guy switch ports at the switch side to one that is known to work? We can't troubleshoot your LAN and it sounds like your computer is set up correctly if it connects using other ports.

My ipod touch is connected to wi-fi but not access safari, youtube, itunes, app store safari even tells me that is not connected to internet, also had trouble at first because I could not connect to wi-fi, afternoon much as told me that the password was i

my ipod touch is connected to wi-fi but not access safari, youtube, itunes, app store, safari even tells me that is not connected to internet, also had trouble at first because I could not connect to wi-fi, afternoon much as told me that the password was incorrect when it was correct, please tell me as I do to let me access youtube, safari, app store, i tunes...
thanks

- Reset the iPOd. Nothing will be lost.
Reset iPod touch: Hold down the On/Off button and the Home button at the same time for at
least ten seconds, until the Apple logo appears.
- Power off and then back on the router
- Reset network settings: Settings>General>Reset>Reset Network Settings
- iOS: Troubleshooting Wi-Fi networks and connections

Connection ... able to connect using sql developer, but not sqlplus or toad too

Hi folks, having this issue, with only one of my so many databases, what might be the reason and how to fix/correct this, please assist.
Able to connect using sql developer, but not sqlplus or toad too; sqlplus error: ORA-12154: TNS:could not resolve the connect identifier specified
thanks in advance.

SQLDEVELOPER works since it use JDBC Thin & does not use tnsnames.ora
ORA-12154 ALWAYS only occurs on SQL Client & no SQL*Net packets ever leave client system
ORA-12154 [B]NEVER[/B] involves the listener, the database itself or anything on the DB Server.
ORA-12154 occurs when client requests a connection to some DB server system using some connection string.
TNS-03505 is thrown by tnsping & is same error as ORA-12154 thrown by sqlplus or others.
The lookup operation fails because the name provided can [B]NOT[/B] be resolved to any remote DB.
The analogous operation would be when you wanted to call somebody, but could not find their name in any phonebook.
The most frequent cause for the ORA-12154 error is when the connection alias can not be found in tnsnames.ora.
The lookup operation of the alias can be impacted by the contents of the sqlnet.ora file; specifically DOMAIN entry.
TROUBLESHOOTING GUIDE: ORA-12154 & TNS-12154 TNS:could not resolve service name [ID 114085.1]
http://edstevensdba.wordpress.com/2011/02/26/ora-12154tns-03505/

Need FB app, but not via the cloud

Hi. I recently upgraded to the iPhone 6 and I am having trouble loading the Facebook app onto it. I had the app on my previous iPhone, so it is stored in my cloud. I no longer have the old email address to access the version on Facebook that is in my cloud, so I am needing to load the app from someplace other than my cloud. I am not given the option to do this when I go in and try to load the app. I have temporarily worked around this issue by accessing Facebook from the web, but it is not the same as logging in through the app itself, and does not offer any sort of notification feature when doing it this way. Does anyone know how I can upload Facebook onto my new phone but NOT via the cloud?

I am not able to download it by just going to the app store. It indicates it is in my cloud, and that is where it is pulling it from. Specifically, the issue I run into when I download it is that when it asks me to enter my password, it is asking for it under my previous account, which I no longer have an email address for since the account has been deleted. Since the old data in the cloud has my old email address, it will not allow me to access it.

WIFI stopped working after I woke the computer up, now says connected to the network but not the internet, all other coputers and devices connected still with no problems, have pinged IP address from router and got the message "4 packets sent none receive

Hi,
WIFI stopped working after I woke the computer up, now says connected to the network but not the internet, all other coputers and devices connected still with no problems, have pinged IP address from router and got the message "4 packets sent none received"... Help
I have tried network diagnostics which doesnt help... The only other ting is, when I woke the computer up it said tat another device was using my IP... My wife had plugged her phone into the computer to charge etc but even when i turn wifi off on the phone there is no change... also in settings on the phone the IP address is different...

The answer to your question is - neither!
Your PC should to configured to obtain an IP address automatically, and to obtain DNS server IP addresses automatically, from the Airport Express. This is the way Windows (and Macs for that matter) are configued by default, and that is the way most people have their computers set up. If you manually configured your PC's IP address to be the same as your wife's Mac, it certainly explains why your PC is not able to access the internet.

My phones imessege has not been working, it connects to my email but not my phone number it says its an option but its in grey and i am not able to click it as an option

i have a iphone 5 and my phones imessege has not been working, it connects to my email but not my phone number it says its an option but its in grey and i am not able to click it as an option

Depending on what iPhone you have when you get to the connect to wifi you should be able to activate your device over cellular data. Try doing a hard reset by holding the home circle button an power button until an apple pops up and the go through the setup again and when you get to the wifi part a option should be setup with cellular data iPhone 4 and above should give this option sometimes doesn't like showing up that's why u have to do a hard reset first

VPN connects when on LAN but not via WAN

Similar Messages

Maybe you are looking for