Configuring an iMac for VPN network

Operating systems on one side 10.5.8
on end side either Tiger, Leopard or Snow Leopard.
At work we have a VPN router (D-Link) and I would like to connect to
work from home on my Mac.
New to VPN stuff. What are the basics settings I should have on my mac at home
for this to work ? Right now I connect to Internet at home through a wireless/Ethernet modem
via Bell Canada (DHCP). I have the DNS server address, etc.
Thanks

System preferences ->
Network ->
Click the +
Interface type VPN
Choose VPN Type and name it.
Then click on the newly create VPN
Add a new configuration with the details of your VPN
Then click connect.

Similar Messages

NAT overload is not working when i configure Double NAT for VPN

I have Cisco 2921 router with OS version 15.1(4)M1.
the router is configured for NAT overload and working fine, i have site to site VPN tunnel with peer with normal NAT translation. now we need to configure Double NAT on the VPN tunnel as we need to free the subnet on peer network. for double nat i use 3.2.21.x - 3.2.23.x / 24 network and apply following command
Double NAT translation
ip nat inside source static network 192.168.10.0 3.2.21.0 /24 no-alias
ip nat inside source static network 192.168.20.0 3.2.22.0/24 no-alias
ip nat inside source static network 192.168.30.0 3.2.23.0 /24 no-alias
Nonat
access-list 101 deny   ip 3.2.21.0 0.0.0.255 3.2.1.0 0.0.0.255
access-list 101 deny   ip 3.2.22.0 0.0.0.255 3.2.1.0 0.0.0.255
access-list 101 deny   ip 3.2.23.0 0.0.0.255 3.2.1.0 0.0.0.255
VPN encrypted traffic over the tunnel
access-list 115 permit ip 3.2.21.0 0.0.0.255 3.2.1.0 0.0.0.255
access-list 115 permit ip 3.2.22.0 0.0.0.255 3.2.1.0 0.0.0.255
access-list 115 permit ip 3.2.23.0 0.0.0.255 3.2.1.0 0.0.0.255
Problem:
as soon as i apply Double NAT translation command the NAT overload stop working and client cannot reach to the internet
the router partial configuration is as below
REACH-R01(config)#do sh run
Building configuration...
Current configuration : 19233 bytes
! Last configuration change at 09:56:45 MST Tue Jan 29 2013 by admin
! NVRAM config last updated at 13:57:54 MST Wed Jan 30 2013
! NVRAM config last updated at 13:57:54 MST Wed Jan 30 2013
version 15.1
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
hostname REACH-R01
boot-start-marker
boot-end-marker
card type t1 0 0
logging buffered 51200 warnings
no aaa new-model
clock timezone MST -7 0
clock summer-time MST recurring
network-clock-participate wic 0
network-clock-select 1 T1 0/0/0
no ipv6 cef
ip source-route
ip cef
ip dhcp excluded-address 192.168.20.1 192.168.20.99
ip dhcp excluded-address 192.168.20.250 192.168.20.255
ip dhcp pool CISCO_PHONES
network 192.168.20.0 255.255.255.0
default-router 192.168.20.254
option 150 ip 192.168.20.254
no ip domain lookup
ip domain name reach.local
ip inspect name ethernetin ftp timeout 3600
ip inspect name ethernetin h323 timeout 3600
ip inspect name ethernetin http timeout 3600
ip inspect name ethernetin rcmd timeout 3600
ip inspect name ethernetin realaudio timeout 3600
ip inspect name ethernetin smtp timeout 3600
ip inspect name ethernetin sqlnet timeout 3600
ip inspect name ethernetin streamworks timeout 3600
ip inspect name ethernetin tcp timeout 3600
ip inspect name ethernetin tftp timeout 30
ip inspect name ethernetin udp timeout 15
ip inspect name ethernetin vdolive timeout 3600
multilink bundle-name authenticated
isdn switch-type primary-ni
trunk group PRI
crypto pki token default removal timeout 0
crypto pki trustpoint TP-self-signed-3180627716
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-3180627716
revocation-check none
rsakeypair TP-self-signed-3180627716
voice-card 0
dsp services dspfarm
voice service voip
allow-connections sip to sip
fax protocol t38 version 0 ls-redundancy 0 hs-redundancy 0 fallback none
sip
voice translation-rule 1
rule 5 /^7804981231/ /401/
voice translation-rule 2
rule 5 // /7804981231/
voice translation-profile DID_INBOUND
translate called 1
voice translation-profile DID_OUTBOUND
translate calling 2
license udi pid CISCO2911/K9 sn FGL1540114P
license accept end user agreement
license boot module c2900 technology-package securityk9
hw-module ism 0
hw-module pvdm 0/0
username test test
redundancy
controller T1 0/0/0
cablelength long 0db
pri-group timeslots 1-6,24
no ip ftp passive
crypto isakmp policy 10
encr aes 256
authentication pre-share
group 2
crypto isakmp key P@ssw0rd address 33.33.33.33 no-xauth
crypto ipsec transform-set ESP-AES256-SHA esp-aes 256 esp-sha-hmac
crypto map VPN-TUNNEL 1 ipsec-isakmp
description COMPUGEN
set peer 33.33.33.33
set transform-set ESP-AES256-SHA
match address 115
interface Embedded-Service-Engine0/0
no ip address
shutdown
interface GigabitEthernet0/0
description Outside Interface To the Internet
ip address dhcp
ip access-group outside_access_in in
ip nat outside
ip virtual-reassembly in
duplex auto
speed auto
crypto map VPN-TUNNEL
interface ISM0/0
ip unnumbered GigabitEthernet0/1.20
service-module ip address 192.168.20.2 255.255.255.0
!Application: CUE Running on ISM
service-module ip default-gateway 192.168.20.254
interface GigabitEthernet0/1
no ip address
ip nat inside
ip virtual-reassembly in
duplex auto
speed auto
interface GigabitEthernet0/1.10
description VLAN 10 DATA VLAN
encapsulation dot1Q 10
ip address 192.168.10.254 255.255.255.0
ip nat inside
ip inspect ethernetin in
ip virtual-reassembly in
interface GigabitEthernet0/1.20
description VLAN 20 VOICE VLAN
encapsulation dot1Q 20
ip address 192.168.20.254 255.255.255.0
ip nat inside
ip virtual-reassembly in
interface GigabitEthernet0/1.30
description VLAN 30 WIRELESS VLAN
encapsulation dot1Q 30
ip address 192.168.30.254 255.255.255.0
ip nat inside
ip inspect ethernetin in
ip virtual-reassembly in
interface GigabitEthernet0/2
no ip address
shutdown
duplex auto
speed auto
interface ISM0/1
description Internal switch interface connected to Internal Service Module
no ip address
interface Serial0/0/0:23
no ip address
encapsulation hdlc
isdn switch-type primary-ni
isdn incoming-voice voice
trunk-group PRI
no cdp enable
interface Vlan1
no ip address
ip forward-protocol nd
ip http server
ip http access-class 23
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
ip http path flash:CME8.6/GUI
ip nat inside source static tcp 192.168.10.10 443 interface GigabitEthernet0/0 443
ip nat inside source static tcp 192.168.10.10 25 interface GigabitEthernet0/0 25
ip nat inside source static tcp 192.168.10.10 1723 interface GigabitEthernet0/0 1723
ip nat inside source static tcp 192.168.10.10 3389 interface GigabitEthernet0/0 3389
ip nat inside source static tcp 192.168.10.10 123 interface GigabitEthernet0/0 123
ip nat inside source static tcp 192.168.10.10 987 interface GigabitEthernet0/0 987
ip nat inside source list 101 interface GigabitEthernet0/0 overload
ip route 0.0.0.0 0.0.0.0 GigabitEthernet0/0 75.152.248.1
ip route 0.0.0.0 0.0.0.0 75.152.248.1 254
ip route 0.0.0.0 0.0.0.0 205.206.0.1 254
ip route 192.168.20.2 255.255.255.255 ISM0/0
ip access-list extended outside_access_in
permit udp any any eq bootps
permit udp any any eq bootpc
permit tcp any host 22.22.22.22 eq 1723
permit tcp any host 22.22.22.22 eq 3389
permit tcp any host 22.22.22.22 eq smtp
permit tcp any host 22.22.22.22 eq 443
permit tcp any host 22.22.22.22 eq domain
permit udp any host 22.22.22.22 eq domain
permit tcp any host 22.22.22.22 eq 123
permit icmp any host 22.22.22.22 unreachable
permit icmp any host 22.22.22.22 echo-reply
permit icmp any host 22.22.22.22 packet-too-big
permit icmp any host 22.22.22.22 time-exceeded
permit icmp any host 22.22.22.22 traceroute
permit icmp any host 22.22.22.22 administratively-prohibited
permit icmp any host 22.22.22.22 echo
permit tcp any host 22.22.22.22 eq 987
permit tcp any host 22.22.22.22 eq 47
permit gre any host 22.22.22.22
permit udp any host 22.22.22.22 eq isakmp
permit esp any host 22.22.22.22
access-list 23 permit any
access-list 101 deny   ip 192.168.20.0 0.0.0.255 3.2.1.0 0.0.0.255
access-list 101 deny   ip 192.168.30.0 0.0.0.255 3.2.1.0 0.0.0.255
access-list 101 deny   ip 192.168.10.0 0.0.0.255 3.2.1.0 0.0.0.255
access-list 101 deny   ip 3.2.21.0 0.0.0.255 3.2.1.0 0.0.0.255
access-list 101 deny   ip 3.2.22.0 0.0.0.255 3.2.1.0 0.0.0.255
access-list 101 deny   ip 3.2.23.0 0.0.0.255 3.2.1.0 0.0.0.255
access-list 101 permit ip 192.168.10.0 0.0.0.255 any
access-list 101 permit ip 192.168.20.0 0.0.0.255 any
access-list 101 permit ip 192.168.30.0 0.0.0.255 any
access-list 110 permit ip 0.0.0.0 255.255.255.0 0.0.0.0 255.255.255.0
access-list 115 permit ip 3.2.21.0 0.0.0.255 3.2.1.0 0.0.0.255
access-list 115 permit ip 3.2.22.0 0.0.0.255 3.2.1.0 0.0.0.255
access-list 115 permit ip 3.2.23.0 0.0.0.255 3.2.1.0 0.0.0.255
Solution: Support forums team

I have the same problem also. Restarting isn't helping and the auto lock/unlock button is on. Plus a couple of time when I turn it on it is asking if I want to power off. That is when I push the button on the front to wake it up. Not the power button on top. I have an IPAd 2. Worked fine before the update.

Configuring Cisco 8800 phones for VPN

Does anyone know how to configure 8800 phones for VPN? I am particularly interested on 8861/8851 models.
Thanks,
Carlos

So I opened a TAC case and they provided me with the solution:
"Usually you upload the Cisco_Manufacturing_CA certificate on the ASA but with the new models we should upload the Cisco_Manufacturing_CA_SHA2 creating a new trustpoint on the ASA"
The security guide does not specify about this cert, it only mentions Cisco_Manufacturing_CA .
Thanks,
Carlos

Reset/restore iMac for kids' use

I am giving my 2007 iMac to the kids and want to wipe out all of my docs, photos, music so it is free for their own stuff (homework, photos, etc).
I'm running Lion and it seems that if I reset to factory settings I will have to reinstall with the discs that came with the machine which was Leopard (or maybe Snow, don't remember).
If I do that, how do I get Lion back?
Do I even need to go to that level of wiping out since it is staying here (ie., not selling it to someone else)?
If not, how do I just get rid of my data but keep Lion and all the apps?
Thanks.

The Apple Support Communities are an international user to user technical support forum. As a man from Mexico, Spanish is my native tongue. I do not speak English very well, however, I do write in English with the aid of the Mac OS X spelling and grammar checks. I also live in a culture perhaps very very different from your own. When offering advice in the ASC, my comments are not meant to be anything more than helpful and certainly not to be taken as insults.
Following the directions for OS X Restore, you should be able to erase the internal HDD, reinstall Lion and then configure the iMac for your kids.
http://support.apple.com/kb/HT4718

DP selection for VPN users and VPN boundaries

Hi
I have a scenario wherein we have 500 users across UK who will connect via VPN, the client has 350 sites with main 25 locations with minimum users (>20) and rest of the sites have less than 10 users.. may one or 2 or 5.. for no DP are placed. aprt from
500 all will be on LAN.
DP is only for sites > 20 users...
so my concern is how do the users who will be on vpn have to be configured for DP to download the content,
if a user moves from one location to other location lets say from London to Manchester how will this user on VPN will be able to select the DP if he is configured to select DP in London.?
Do advise how to configure the DP for VPN user who move from location to location. How will they select the DP.
we do have the IPrange for VPN users , but how to map it to DP. if I map London DP to a user and then if he is in Manchester the user will all way pull the content across WAN.. how to make the user to auto connect to local DP(Manchester) if on VPN.
Thanks

if I map London DP to a user and then if he is in Manchester the user will all way pull the content across WAN.. how to make the user to auto connect to local DP(Manchester) if on VPN.
You don't map users to DPs and DP communication is dynamic and not persistent in any way. Thus, *every time* that a client requests content it submits its current IP and is given DPs to download the content from based on this IP and the configured boundaries.
Thus, as long as your "locations" have different IP ranges, there's nothing special to do.
Jason | http://blog.configmgrftw.com | @jasonsandys

Configuring Cisco ASA for site to site VPN ( Issue with setting up local network)

OK, so our primary firewall is a checkpoint gateway. Behind that we have a cisco ASA for vpn users. I have a project at the moment where we need to connect to another company using site to site VPN through the cisco ASA, as the checkpoint gateway is unable to establish a permanent tunnel with the other companies Cisco ASA.
What would be the best practise for setting up the local network on my side? Create the network on the ASA and then use a L2 vlan to connect to the Core switch?
Setup a L3 interface on the core switch and point it towards the checkpoint gateway which would then point to the ASA?
When you have to select your local network through the site to site wizard do you have to put the inside network address of the ASA?
Our network is setup like this: Access layer switch > Core 6500 Switch > Checkpoint-Firewall > Internet
The ASA is connected to a checkpoint sub interface
Any help would be beneficial as im new to cisco ASAs
Thanks
Mark

Mark
If we understood more about your environment we might be able to give you better answers. My initial reaction was similar to the suggestion from Michael to use a L2 vlan. But as I think a bit more my attention is drawn to something that you mention in the original post. The ASA is there for VPN users. If the VPN users need to access your internal network then you probably already have something configured on the ASA that allows access to the internal network. Perhaps that same thing might provide access for your site to site VPN?
HTH
Rick

IMac creating VPN for ATV 2 via Internet Sharing...

Apologies for the complex nature of this problem/question. Any guidance you (the great and the good of the Apple eco-system) can offer will be gratefully received.
First up, most of what I set out below works fine. Or should I say, it all works fine, but intermittently fails on me. And I realise it's possibly a 'home network configuration' issue, but I'd still appreciate someone with the requisite skills checking this over....
The following feature in my set up, all running latest software versions:
1. a late 2012 iMac running Mountain Lion.
2. an Apple TV 2.
3. a first generation Time Capsule.
4. a Strong VPN account.
5. an ADSL modem / router.
As it stands:
the Time Capsule is connected to the ADSL modem via Ethernet.
the ADSL modem / router is configured as DHCP.
the ADSL modem / router is configured to provide a 802.11g network - SLOWNET
the Time Capsule is configured in Bridge mode.
the Time Capsule is configured to provide a 802.11n WiFi network - FASTNET
the iMac is connected to the Time Capsule via Ethernet.
the iMac is configured to establish a VPN connection.
the iMac is configured to create a WiFi network - VPNNET
the VPN connection is shared using 'Internet Sharing' to users of VPNNET.
Apple TV connects to VPNNET.
All works, and all is well. EXCEPT:
1. regularly ATV loses the connection to VPNNET, usually when it (ATV) hasn't been used for a while, hence VPNNET likely to have been disconnected / reconnected since ATV last accessed it. Having lost the network connection, it can take over one hour to get it back. Sometimes it can't see VPNNET, sometimes it connects but can't see the Internet - and occasionally I've changed DNS server address in ATV to Google (8.8.8.8) and it kicked it back into life.
2. Home Sharing on ATV doesn't work when it's connected to VPNNET - I have to connect to FASTNET to get it to work.
So the questions I have are:
1. How should DHCP be set up on my network, Time Capsule, modem / router, doesn't matter? What about on the iMac for VPNNET?
2. Is there a way to configure the above kit, and have the VPN and Home Sharing working at the same time?
3. Where / How should DNS be configured in my set up?
As I write this down I'm forced to acknowledge just how involved it is, and don't hold out much hope of someone coming along with a simple "change these settings and problem over" solution - but I can live in hope!
Thanks for reading to the end.
PB

See http://support.apple.com/kb/HT4199.

Configuring PPP options for only one VPN connection

How do you configure PPP options for only one VPN connection that is using L2TP over IPSec? The built-in VPN client in 10.4.9 is failing authentication because it won't talk MSCHAP-V2 (this is the only authentication protocol I can use) with the server. I am able to establish a connection if I add the following to /etc/ppp/options:
refuse-eap
refuse-pap
refuse-chap
refuse-mschap
require-mschap-v2
However, these options will affect all PPP connections. The preference file that contains the network configurations (/Library/Preferences/SystemConfiguration/preferences.plist) also contains PPP options for each specific network service. After some searching around, I found that there are several keys that seem promising (MSCHAP2, etc.). But these keys take a string value and I have no clue what they should be. These keys are defined in SCSchemaDefinitions.h file.
Any ideas?
Mac OS X (10.4.9)

Hi Brian,
I just tried to check all of ADDT´s "includes" files for any internal references (read: "require" or "require_once" statements) to the file "tNG_config.inc.php". So far I can only see this file referenced in the file "tNG.inc.php" (within the "$KT_tNG_uploadFileList1" array).
So what could this mean ? Maybe you´ll have to make copies of the the original "tNG.inc.php" as well and save them as, say, "tNG.inc_ital.php" file plus make sure that these copies internally point to a different "tNG_config_ital.inc.php" file -- because it´s always the first mentioned file which gets referenced from e.g. an ADDT login page (see the "Load the tNG classes" - part)
I want to use ADDT’s User Registration Wizard and I have looked at all the neat stuff in the Control Panel/Login Settings
The Control Panel will always update the main "tNG_config.inc.php" file, so any further modifications will have to become manually applied to the custom files you´re creating.
Cheers,
Günter

Setting up PIX515E VPN for two networks

Hello,
We have a PIX515E and I want to set it up so it can serve client VPN connections for a network on the inside interface and also for a network on the dmz interface.
On a client machine we set up the ip address of the PIX in a VPN connection and the user can log on using credentials and domain. Now the PIX has to look up credentials using RADIUS, but some users are known on domain A (inside interface) and some users are known on domain B (dmz interface). Domain B is completely different and uses other internal ip addresses, dns servers, ip pool etc.
Already I have set up VPN for the inside interface and that was easy and it works ok.
But can I create such a configuration? We only have one DSL line and we want both networks (domain A 192.168.1.x and domain B 192.168.10.x) to go through this PIX.
Your help is more than appreciated!
Regards,
Frank

rob,
i don't know your budget requirements, but here is a relatively easy solution:
http://www.apple.com/server/macosx/features/networkingvpn.html
and here is an OSS solution that will take a bit more work (but should run on an older box with bsd, linux, or os x running on it):
http://openvpn.net/
cheers,
b

I've forgotten my Wi-Fi password for a network set-up years ago and am trying to include a new iMac on the same network. How can I do this?

I've forgotten my wi-fi password for a home network set-up years ago on a Powerbook. I'm now trying to add a new iMac to the same network so I can have 2 hooked up. How can I retrieve my password for the network I created or can I set-up a new one? I did try the latter, but it didn't seem to work on the new iMac for some reason. Thanks in advance for any suggestions!

HI, Welcome to the Forums...
The password may be stored in your keychain on the system you set up the original PowerBook.
Run KeyChain access in the utilities filder and see if you have a Airport base station password entry, from this you can reveal the password.
Regards,
Shawn

I hooked up new iMac to wireless network and now iPad and iPhone do not work using wireless. I am using a Netgear N300 router. Also my Netgear ethernet/homeplug for wireless TV internet no longer works. Any ideas?

I hooked up new iMac to wireless network and now iPad and iPhone do not work using wireless. They did before hooking up the iMac. I am using a Netgear N300 router. Also my Netgear ethernet/homeplug for wireless TV internet no longer works. Any ideas? I have tried unplugging, restarting, and resetting. No luck! Thanks!

You should probalby contact Netgear

I have just purchased an iMac for home - am I able to network an iMac with a windows laptop?

I have just purchased an iMac for home - am I able to network an iMac with a windows laptop?

It sounds really unlikely though... You have to type in your password twice when setting up so you either:
made the same typo twice
the caps lock was on
You held down SHIFT during one of the letters
the keys have relocated because of different language keyboard layout
you simply forgot exactly what you typed.
Are you aware that passwords are case-sensetive? also, when using punctuation in passwords be aware that language localization of the keyboard can cause relocation of certain symbols like $ and € and * and ' which may make it impossible to retype the password correctly, if you are unaware of the correct way to type a certain puntuation symbol.

Where can I read the proxy settings Firefox chose, when configured to use "Auto-detect proxy settings for this network"?

I would like to set my system network proxy settings to those, Firefox chose. Firefox is configured to use "Auto-detect proxy settings for this network" and this works fine. How can I read out the settings Firefox chose, so I can adapt these system?

Hello Richard,
Download MozBackup and make a backup of your bookmarks and passwords. Uninstall firefox and remove ALL folders with the name "Firefox".
Install Firefox and restore your bookmarks and passwords. Now you should have a fresh install so you have to make all settings again.

Access Point configuration for flat network

We have recently aquired a remote location which has a pre-existing flat network (172.16.X.X/16). Before we are able to convert them over to our new IP scheme, they have a need to have wireless connectivity on site. We have 4 1142's which I need to configure for them. I have experience configuring WLC's and autonomous AP's for networks with multiple vlans but have never configured AP's for a flat, single subnet network. I need to configure them for either guest access (internet only) or corporate access to network resources with radius authentication. Do I configure a native vlan as I would for a typical multi vlan network? Do I configure the switch port as an access port as opposed to a trunk beacause of the lack of layer 3? I basically need a sample configuration for this situation.

since you are on flat network, you just need to configure the SSID, no need for subinterfaces. With the AP only servicing the one VLAN you can leave the port as an access port as well.
as they are on the only subnet, I wouldn't do a 'guest' SSID. I would go with just the corporate SSID with WPA2/AES/802.1x. So the config is exactly the same for the RADIUS server and the SSID, but greatly simplified since you don't have to sub-interface anything.
Steve

How to configure router to use ip pool on the aaa server for vpn clients

how to configure router to use ip pool on the aaa server for vpn clients . i want to use vpn clients to connect to the router. authenticate using the aaa server username databse and also use the ip pool cretaed on the aaa server. i am not able to find the command on the router pointing to use the pool created on the aaa server. can u some one help me with this command.
sebastan

Hello Sebastan,
what do you use as AAA server (e.g. ACS with TACACS+ or RADIUS) ?
Regards,
GNT

Configuring an iMac for VPN network

Similar Messages

Maybe you are looking for