Why is my Mac initiating hidden VPN connections?

In looking through my system.log, I've discovered that my Mac is initiating VPN connections in the background but I don't know why, nor do I know what it's connecting to. It's apparently been going on for at least several weeks, if not longer. Here's some relevant entires from the log:
Sep 3 14:45:30 BruceMacBookPro.local racoon[153]: Connecting.
Sep 3 14:45:30 BruceMacBookPro.local racoon[153]: IPSec Phase1 started (Initiated by me).
Sep 3 14:45:30 BruceMacBookPro.local racoon[153]: IKE Packet: transmit success. (Initiator, Aggressive-Mode message 1).
Sep 3 14:45:30 BruceMacBookPro.local racoon[153]: Connecting.
Sep 3 14:45:30 BruceMacBookPro.local racoon[153]: IPSec Phase1 started (Initiated by me).
Sep 3 14:45:30 BruceMacBookPro.local racoon[153]: IKE Packet: transmit success. (Initiator, Aggressive-Mode message 1).
Sep 3 14:45:32 BruceMacBookPro.local racoon[153]: IKEv1 Phase1 AUTH: success. (Initiator, Aggressive-Mode Message 2).
Sep 3 14:45:32 BruceMacBookPro.local racoon[153]: IKE Packet: receive success. (Initiator, Aggressive-Mode message 2).
Sep 3 14:45:32 BruceMacBookPro.local racoon[153]: IKEv1 Phase1 Initiator: success. (Initiator, Aggressive-Mode).
Sep 3 14:45:32 BruceMacBookPro.local racoon[153]: IKE Packet: transmit success. (Initiator, Aggressive-Mode message 3).
Sep 3 14:45:32 BruceMacBookPro.local racoon[153]: IKE Packet: transmit success. (Information message).
Sep 3 14:45:32 BruceMacBookPro.local racoon[153]: IKEv1 Information-Notice: transmit success. (ISAKMP-SA).
Sep 3 14:45:32 BruceMacBookPro.local racoon[153]: IPSec Phase1 established (Initiated by me).
Sep 3 14:45:32 BruceMacBookPro.local racoon[153]: IKE Packet: receive success. (Information message).
Sep 3 14:45:33 BruceMacBookPro.local racoon[153]: IKE Packet: transmit success. (Phase1 Retransmit).
Sep 3 14:45:33 BruceMacBookPro.local racoon[153]: IPSec Phase2 started (Initiated by me).
Sep 3 14:45:33 BruceMacBookPro.local racoon[153]: IKE Packet: transmit success. (Initiator, Quick-Mode message 1).
Sep 3 14:45:33 BruceMacBookPro.local racoon[153]: IPSec Phase2 started (Initiated by peer).
Sep 3 14:45:33 BruceMacBookPro.local racoon[153]: IKE Packet: receive success. (Responder, Quick-Mode message 1).
Sep 3 14:45:33 BruceMacBookPro.local racoon[153]: IKE Packet: transmit success. (Responder, Quick-Mode message 2).
Sep 3 14:45:34 BruceMacBookPro.local racoon[153]: IKE Packet: receive success. (Initiator, Quick-Mode message 2).
Sep 3 14:45:34 BruceMacBookPro.local racoon[153]: IKE Packet: transmit success. (Initiator, Quick-Mode message 3).
Sep 3 14:45:34 BruceMacBookPro.local racoon[153]: IKEv1 Phase2 Initiator: success. (Initiator, Quick-Mode).
Sep 3 14:45:34 BruceMacBookPro.local racoon[153]: IPSec Phase2 established (Initiated by me).
Sep 3 14:45:34 BruceMacBookPro.local racoon[153]: IKE Packet: receive success. (Responder, Quick-Mode message 3).
There's lots more, but it all looks pretty much like the above. Would the OS, or some standard system service or application, be doing this? During the time period covered by the above log entries, as far as I can remember, the only apps I was running were Mail, Safari, and 1Password. I do have some VPN connections defined in the Network panel of System Preferences, but I was NOT using them at the time. Is this normal, or do I have a problem?
-- Bruce

I found this today also. I'm going to turn off Back to my Mac, DropBox and Splashtop Remote and see if that stops it. Do you run any of these? And tried turning any OFF.

Similar Messages

Why can't I establish a VPN connection using my iPhone 4's personal hotspot?

Hello everybody,
I want to access our company's network with my Mac Book Pro using my iPhone 4's 3G connection, but unfortunately it simply won't work. Here is what I can do:
- I can establish a VPN connection from my MacBook Pro using my home (or some other) WiFi and access the company network.
- I can establish a VPN connection on my iPhone 4 using 3G and access the company network on my iPhone 4.
- I can use my iPhone 4's personal hotspot (sharing its 3G connection) with my MacBook Pro and surf the Web.
what I can't do is:
- establish a VPN connection on my MacBook Pro when connected to the internet via the iPhone's personal hotspot. (connection times out)
- access the company's network on my MacBook Pro using the personal hotspot, when the iPhone's VPN connection is ON.
The VPN is an encrypted PPTP connection, with username and password.
Is this a known issue, and, if so, is there any way to solve this?
Thanks in advance!
Cheers
Diego

what i forgot:
i'm connecting to the iPhone's hotspot using WiFi
and:
the answer provided here did not do the trick for me :/
https://discussions.apple.com/message/17729456#17729456

Why does my mac pro keep losing connection

why does my mac pro and my husband keep losing connection

Same thing happening to me... WiFi is loosing all the time, but I did something that would never work in 10000 years, but worked... I disabled WPA security password, and with no password i don't have problem since... try that...

Why does my mac say "failed to connect to the device" when I try to print through airport express?

So a little back ground. I have a unibody 2 ghz core 2 duo running 10.5.8 and a mac book air running 10.7.5. I set a airport express and added a new printer to both computers using bonjour. My mac air has no problem connecting and printing but my unibody does. The "failed to connect to device" message come up after I open print que for that printer and then utility. It unibody sees the printer through bonjour and installs the printer but when asked to connect, nothing happens. can anyone help please?

If you updated from a previous version of OS X to 10.9 and had an older version of driver installed, then you can get this message. Sometimes a quick fix is to reset the printing system. Note that this action will remove all devices from the Printers & Scanners preference pane, but not the supporting drivers, so if you do have other printers or scanners on this Mac you will have to add them again.

MAC: Uml290 & vzw access manager, IPSec VPN connections don't work

So, my vpn connections work if I use my UML290 on windows using verizon access manager
I am now using the new verizon access manager on my mac, and my VPN connections do NOT work. It tries to connect then immediately stops the attempt at connecting and fails (i can access other websites etc OK, I have connectivity!)
This is a huge problem for me

Hello,
I have been having the same problems. When not connected to VPN, things work fine. When VPN connects, all traffic stops passing, even though there is a successful connection. When I disconnect VPN, all traffic resumes.
I have gone through this with technical support even to the point of doing a trace during the problem and they confirm that the traffic drops, but do not feel it is a network issue. This problem does not happen with any other network adapter I use (Wi-Fi, T-mobile 4G laptop stick).
I've put together links of articles I have found online describing this problem and probable cause - which I think is an IP address conflict in the 10.x.x.x space. No resolution has been offered to me. I hope these articles help others or if they are having the same experience they might post here.
http://delicious.com/stacks/view/SL8rGb - "Verizon LTE problems with VPN using Pantech UML 290" - Link Stack
If anyone comes across a resolution or knows if there will be an update of any kind to fix this, I would appreciate it, thank you.

2 concurrent VPN connections

ISP: Comast Broadband
LinkSys Wireless Router: SRX200 (WRT54GX2)
PCs: 2 Dell laptops, D410 & D600
PC Connections: Each laptop works wired or wirelessly to access Internet
Problem statement: When my wife an dI both work from home, we can only maintain 1 VPN connection. Upon initiating a VPN connection from the 2nd laptop, the 1st laptop's connection is disabled.
Goal: We would like to be able to connect to our work VPN and work remotely concurrently. Is this possible?

It is definitely possible - we do it all the time.
The first thing I would check for is that each PC gets a distinct IP.
Maybe your DHCP settings only allow for one IP. Like when the first and the last IP in the range are the same number: 192.168.1.100 as an example.
If you do get individual IP's, then it may be something to do with the VPN settings. Do you both connect to the same VPN, or two different ones? If it's the same, it may be that their server only allows one VPN per Internet IP, so that's not a router problem.

OEL 5 - Cisco VPN connects proper, then in a few minutes times out

Issue
I installed the latest Linux Cisco VPN (e.g. on Oracle Enterprise linux)
Error
I get this-->
[user@localhost ~]$ vpnclient connect xyz
Cisco Systems VPN Client Version 4.8.01 (0640)
Copyright (C) 1998-2007 Cisco Systems, Inc. All Rights Reserved.
Client Type(s): Linux
Running on: Linux 2.6.18-164.el5xen #1 SMP Thu Sep 3 02:41:56 EDT 2009 i686
Config file directory: /etc/opt/cisco-vpnclient
Initializing the VPN connection.
Contacting the gateway at xxx.xx.xxx.xxx
Contacting the gateway at xxx.xx.xxx.xxx (balancing)
User Authentication for xyz...
Enter Username and Password.
Username [xyz]:
Password []:
Authenticating user.
Negotiating security policies.
Securing communication channel.
Your VPN connection is secure.
VPN tunnel information.
Client address: xxx.xxx.xxx.xxx
Server address: xxx.xx.xxx.xxx
Encryption: 168-bit 3-DES
Authentication: HMAC-SHA
IP Compression: None
NAT passthrough is active on port UDP 4500
Local LAN Access is disabled
Secure VPN Connection terminated locally by the Client
Reason: Remote peer is no longer responding.
Disconnecting the VPN connection.
[user@localhost ~]$
Questions
Even when I drop the OEL 5 firewall -- the remote peer will still "no longer respond"
Also, while the VPN is connected, browsers set to the proper proxy and mail do not connect and return data, etc...
Then it just does this -->
Secure VPN Connection terminated locally by the Client
Reason: Remote peer is no longer responding.
Any advise will be appreciated....
Thanks.....
Edited by: mheath on Dec 7, 2009 2:41 PM

1) Note that I do understand that external mail will not work when connected to the vpn, only internal mail
2) When the vpn is connected, the following should work and both "do not work":
a) When pointing to the proper proxy, the browser should display "external pages like google" and internal pages..
b) And, internal imap mail should work - it does not
3) on a windows machine in the same exact subnet/network vpn works fine...?
4) Also, I have had vpn working with ubuntu 9.1x just previously in the same exact subnet/network!
5) ==> Something is not letting the vpn communicate "after" it is connected on the OEL 5 server ?
Thanks...

Can not establish L2TP connection to Mac Server via VPN

Hi,
I am asking for some help on this VPN Problem:
since yesterday I have a new Mac mini Server running OS X 10.9.3 and Server Software 3.1.2 - my goal is to reach some deivces in my home network from outside, mainly with the iPhone or iPad.
Dyn.org
I registered with Dyn.com a hostname using my outside IP Address. Server Type: Host with IP Address and used the IP Address presented to me in the stup wizard. This one is shown as active and when I ping or Lookup the Host Name it is responding - so I think I am fine here.
Mac Mini Server
Next I have setup a user on the server who can use VPN. Next I have setup the VPN service with L2TP, using the Host name von dyn.org, a nice shared secret, IP range 10.0.1.190 to 10.0.1.199, DNS 10.0.1.1, no routs.
I exported this as config file to my iPhone.
The VPN Protocol in the Server says, it is listening for connections.
When I turn on VPN on the iPhone it replies always L2TP-VPN-Server has not answered.
AirPort Extreme
The AirPort Extreme is configured by the Server with Ports 500, 1701, 4500 and the Mac Server 10.0.1.26 as Privat IP Address.
The Internet Tab shows Router and DNS as 192.168.211.1 and IPv4 Address as 192.168.211.109
I actually do not understand why I have a 192.168.xxx.xxx DNS and router entry while I have the Privat Network on 10.0.1.xxx
The Protocol for VPN just says nothing at all, besides that it is listening. I guess something is blocking the connection to the server.
By looking at my above configutation - what am I doing wrong? Why do I get this L2TP-VPN-Server error message? I changed the password for the user to be sure I am not miss spelling it. Did not help.
Any idea?
Thank you for your support!
Regards
Klaus-Martin

According to your IP addresses you listed, you might have two devices that are trying to create a NATed network (one in the 10.0.0.0/8 and 192.168.0.0/16 networks). Can you list what devices you have between your server and the Internet?
I'm going to take a guess that you have a router/modem prodived by your ISP, and this is going to give you a 192.168.211.0/24 network (since it set up as a router to provide its own network). You then plugged an Airport into this router and configured it to set up its own wireless network on its own subnet (10.0.1.0/24). The server is on this network, sees the Airport (and lets you configure it). So while your hostname points to your external address (which is good), it's just that external address is the WAN side of the modem/router and not the Airport. I think your network is set up like this: Internet --> ISP modem --> Airport --> Server. If this is the case, you need to set up the ISP modem/router to port forward L2TP ports to your Airport (which in turn, port forward to your server). Or you could set your ISP modem/router into bridge mode and have the Airport dial the connection to the ISP (more complicated).
Have you tried VPN from the local network, say put the phone on wifi and make sure that works? This would be a quick test to make sure the phone and server are set up properly.
Also, have you tried port scanning your host from a computer outside your network, like from an iPhone on celluar? That would help you determine if you have routing configured properly for the L2TP VPN ports.

Rv215w not initiating vpn connection

Hi,
Can someone tell me why rv215w is not initiating the site to site vpn connection ?
I configured the connection with the ASA5505 and everything is working
beautifuly if the connection is initiated from the remote site (eg. ping from the remote network),
but if tunnel is disconnected and I want to establish connection from the
network behind the RV215 then it is not possible.
RV215 is not able to initiate the ipsec connection ?
Regards
Michal Witkowski

Dear Michal,
Thank you for reaching the Small Business Support Community.
I would first suggest you to make sure "Perfect Forward Secrecy" setting is disable on the ASA and "PSF Key group" uncheck under the "Advanced VPN settings>Auto Policy Parameters" on the RV215. If already disabled on both sides and the problem persists, I then suggest you to set the "VPN Advanced settings>Exchange Mode" to "Main" and not "Aggressive" on both sides. Uncheck the "Dead Peer Detection" if the problem persists. If no difference please screenshot and send the "Advanced VPN Setup" settings for us to check them out.
Make sure you run the latest firmware release version v1.1.0.5 on the RV215;
http://software.cisco.com/download/release.html?mdfid=284436489&flowid=37822&softwareid=282487380&release=1.1.0.5&relind=AVAILABLE&rellifecycle=&reltype=latest
Just in case you may need it, below is a link for the admin guide where on chapter 5 describes the VPN parameters I mentioned;
http://www.cisco.com/en/US/docs/routers/csbr/rv215w/administration/guide/78-20779.pdf
I'll be looking forward to your reply.
Kind regards,
Jeffrey Rodriguez S. .:|:.:|:.
Cisco Customer Support Engineer
*Please rate the Post so other will know when an answer has been found.

VPN connection on Mac gives "PPP Server cannot be authenticated"

Hello all
I am trying to connect my mac mini to my company's VPN. On my mac mini I tried the following to connect to VPN.
- System Preferences -> Network
- Created a new network, interface: VPN, VPN type: L2TP over IPSec, service name: Office VPN
- Configuration: default, Server Address: 222.222.22.222, Account Name: user1
Authentication Settings -> User Authentication Password: (password), Machine Authentication Shared Secret: (secret)
This does connect the mac to the vpn but after an interval of 6-10 minutes I always get a "PPP server cannot be authenticated" error. I can't seem to understand what is going wrong over here. The same problem is with every mac trying to connect to this vpn. Windows PC users did not report a problem of such sort.
I checked the system logs as well. Here's what happened until the connection was disconnected.
Thu Apr 14 14:43:02 2011 : L2TP connecting to server '222.222.22.222' (222.222.22.222)...
Thu Apr 14 14:43:02 2011 : IPSec connection started
Thu Apr 14 14:43:04 2011 : IPSec connection established
Thu Apr 14 14:43:04 2011 : L2TP connection established.
Thu Apr 14 14:43:04 2011 : Using interface ppp0
Thu Apr 14 14:43:04 2011 : Connect: ppp0 <--> socket[34:18]
Thu Apr 14 14:43:04 2011 : CHAP authentication succeeded
Thu Apr 14 14:43:07 2011 : local IP address 192.168.69.100
Thu Apr 14 14:43:07 2011 : remote IP address 192.168.1.254
Thu Apr 14 14:43:07 2011 : primary DNS address 192.168.1.84
Thu Apr 14 14:43:07 2011 : secondary DNS address 192.168.1.85
Thu Apr 14 14:43:07 2011 : l2tpwaitinput: Address added. previous interface setting (name: en1, address: 192.168.4.14), current interface setting (name: ppp0, family: PPP, address: 192.168.69.100, subnet: 255.255.255.0, destination: 192.168.1.254).
Thu Apr 14 14:43:37 2011 : l2tpwaitinput: Other Address event (8). previous interface setting (name: en1, address: 192.168.4.14), other interface setting (name: 99, family: 8716788, address: 4.0.69.100, subnet: 0.0.0.1, destination: 128.192.31.0).
**Thu Apr 14 14:43:34 2011 : IPV6CP: timeout sending Config-Requests**
Thu Apr 14 14:55:07 2011 : Connection terminated.
Thu Apr 14 14:55:07 2011 : Connect time 12.1 minutes.
Thu Apr 14 14:55:07 2011 : Sent 20233 bytes, received 48346 bytes.
Thu Apr 14 14:55:07 2011 : L2TP disconnecting...
Thu Apr 14 14:55:07 2011 : L2TP disconnected
Can somebody help me out over here? What could be going wrong over here?

I'm looking for much the same answer, so can't help with the big picture. However, the Firewall options are not in System Preferences, but in the Server Admin in the Dock. Click on it, click on the triangle next to your server's name, then go down to FIrewall.

VPN connected - how do I access my office mac?

VPN - I am connected remotely on my MacBook Air via a VPN connection to my office Mac. How do I actually "see" the files, folders, etc. on my office Mac?

Thank you for your suggestion. I did turn on file sharing on the server before I left last night and attempted to connect through the VPN to the server's local address at my office but I was unsuccessful. The IP address I used was the static assigned IP address of the server computer and I waited for over 10 minutes to connect without getting a connection or any error messages. Prior to that, when I used an incorrect address or attempted to use the actual server's assigned network name, I received an error message within 10 seconds. Is there something I haven't considered at this point?

Why does my Mac Book go to a presenters mode when I connect to a projector?

Why does my Mac go into a presenters mode when connected to a projector or system?

But does it then come fully awake? My MB Pro comes on with out of focus screen as if in a fog but once it comes awake it clears up, there is a progress bar at the bottom showing the progress from sleep

"Back to My Mac is turned on, your VPN connection cannot be established"?

Hi,
I searched for this recurring notice that I am getting " Because Back to My Mac is turned on, your VPN connection cannot be established", and came up with this thread: http://discussions.info.apple.com/message.jspa?messageID=8436720
However, I am not trying to establish a VPN when I get this message (and don't have one AFAIK).
Any idea what might be causing this message? I can't seem to figure out what triggers it, it just seems to pop up every hour or so. iChat is the only thing I have been using recently that seems to
Is there any way to discover what VPNs my laptop has set up? I don't have any additional software that is specific to VPNs, so it would have to be something already built into the OS. Does the Transmission application create a VPN? That is the only thing I can think of.
Any other ideas on what might be causing this message?
Your help is appreciated!
A.

If you have a VPN installed (by mistake?) you should be able to go to your System Prefs > Network and see the VPN listed in the left hand column along with Aiport and Ethernet. You can un-install by using the minus button at the bottom of the column.
The link provided shows you how to install a VPN client with screen shots, including one of this Network Prefs screen and what a VPN client looks like.
https://www.publicvpn.com/support/MacOSX105.php

Why does my L2TP VPN connection never really contact the server?

To be clear, this configuration is not on my own Mac, but on one belonging to someone I serve with technical support.
I am configuring an L2TP over IPSec VPN connection on a MacBook Pro. This connection is to a ZyXEL USG 300 and works successfully from my iPad. (I do not have my own OS X device from which I can test the connection.)
To the best of my knowledge, I have entered all of the information that is needed for the connection. Yet when I try to connect, all I receive is an indication that the server did not respond. In the USG logs, there is no indication at all of there being even a connection attempt. In a Terminal session on the Mac (verbose logging is enabled), I read:
L2TP connecting to server 'xx.xx.xxx.xx' (xx.xx.xxx.xx)...
IPSec connection started
IPSec connection failed
It appears to me as if the connection never leaves the Mac and is prevented or stopped by some fault in the system. The firewall is turned off.
What suggestions do you have for identifying the problem?

That's weird but you should be able to manually install the update like this:
#Download a fresh copy from [http://www.mozilla.org/en-US/firefox/all/ here] - direct link (https://download.mozilla.org/?product=firefox-28.0-SSL&os=osx&lang=en-US)
#Install the new version. For details, see [[How to download and install Firefox on Mac]]
Usually this fixes this issue with automatic updates. There will be new version available starting next Tuesday. The automatic update will happen sometime over the following week or so.
Let me know how it goes.<br>
Thanks,<br>
Michael

[Mac OS X] Problems setting up L2TP VPN Connection

I recently moved from Windows to Mac OS X (10.6.6). Unfortunately this move was not so smoothly as I hoped for and I am currently facing some issues with the VPN-connection to the company I work for. As with many companies they do not have a Mac-guide and I am trying to solve this issue, but so far unsuccesful.
To access my data on the company’s server (MS TS Environment) I need to establish a L2TP-IPsec VPN connection. I used Mac OS X built in network tool and filled out all the necessary information such as vpn address, shared secret/key, password and accountname. I even double checked the information various times so no spelling errors occurred. After some seconds I receive the message that the L2TP-VPN-server does not respond.
I checked other posts already and I checked the box that sents all traffic via this VPN-connection but without any results. For a moment I doubted that the cause of this issue might be my home-network: MBA <-> Timecapsule <-> Thomson TG789 … however when I make a L2TP VPN connection using a Windows XP or Vista pc this can be done without problems (using the same network structure) so I guess it is a mac-related problem either with my MBA (Mac OSX) or with the companies servers…
I found out that using the console.app can provide me with some more information about the connection process:
- L2TP connecting to server
- IPSec connection started
- IKE Packet: transmit success.
- IKE Packet: receive success.
After a couple of attemps from the 6th message it suddenly shows:
- IKE Packet: receive failed.
- IKE Packet: transmit success.
- IKE Packet: receive failed.
-IKEv1 Phase1: maximum retransmits.
-IKE Packets Receive Failure-Rate Statistic.
And this finally results in ' IPSec connection failed'
Does anyone has an idea of what the problem might be (e.g. the settings of the MAC or the settings of the companies VPN or ???) and maybe a solution for this problem?
Many thanks from a newbie but satisfied Mac-user!

Hi, I have the same problem with the establishing VPN connection using L2TP without IPsec.

Why is my Mac initiating hidden VPN connections?

Similar Messages

Maybe you are looking for