Version of Cisco IPSec used in 10.6

Hi everyone,
What version of Cisco IPSec does the built-in client in 10.6 use?
A

My update of OS X to 10.6.3 made mail.app (v. 4.2 1078) unusable.
Connections to receive mail timed out repeatedly. This happened on both POP and
IMAP accounts.
I tried to rebuild mailboxes/indexes, delete preferences, etc. Nothing worked. I set up new
accounts and had the same problem. I tried other email clients (Thunderbird and Seamonkey)
with existing and new accounts and had the same problem.
I set up Seamonkey running on a Vista machine on the same network with the same account
information as on the Mac and it worked fine.
I reinstalled the last OS update (10.6.3) again, no change.
I finally reinstalled the OS from the installation DVD. Now running OS X v. 10.6 and mail.app
v. 4, and after a slow startup (caching attachments from the IMAP account) everything seems to
be back to normal.
Besides the various email clients, no other applications seemed to be affected by the 10.6.3 update.
John

Similar Messages

Configurate cisco ipsec vpn client at asa 5505 version 8.4

Hi dear. I want to configurate cisco ipsec vpn client at asa 5505. At my asa the software version is 8.4.
please provide me a link or some material to config ipsec vpn client at asa 5505 version 8.4
thank you.

are you looking for vpn client .pcf file or the configuration on ASA (ASDM) ?
what version of vpn client ?

Cisco IPSec and XAuthPassword profile key

I am creating the config profile for iPhone, while using iPhone Configuration Utility I can not enter password for IPSec VPN as the application does not have UI for that.
I had found, though, that manually writing "XAuthPassword" key into the config profile does the trick, iPhone do recognize that entry and sets the password automatically on applying profile.
So, the questions are:
1) Is this config key officially supported on iOS for IPSec VPN? If yes, then starting with which version?
2) Because iPhone Configuration Utility does not allow me to create signed profiles containing XAuthPassword key, can I manually sign the configuration profile I had edited?
Thank you in advance

Hi,
in « iOS Configuration Profile Reference »:
IPSec Dictionary Keys
XAuthEnable – Integer:1 if XAUTH is ON, 0 if it is OFF. Used for Cisco IPSec.
It turn off XAuth and do not ask for User/Password.
You can try this option by editing configuration profile like this:
<key>XAuthEnabled</key>
<integer>0</integer>
<key>AuthenticationMethod</key>
<string>Certificate</string>
but I can`t resolve the problem, I seems it is a ios (4.3.1) bug, because my vpn-server works fine with other vpn-clients, like Cisco VPN Client, with certificate authentication and without xauth.
Best regards!

Mavericks VPN dropouts with native VPN client and Cisco IPSec

Since update to Maverics I am experiencing VPN dropouts with native VPN client and Cisco IPSec
I am connecting via a WIFI router to a remote VPN server
The conenction is good for a while but eventually it drops out.
I had Zero issues in mountain lion and only have issues since the update to 10.9
I had similar issues in teh past with an unrelaibel wifi router but i am using a Verizon Fios router and it has worked impecably until mavericks
My thoughts are:
1 -issue with mavericks ( maybe the app sleep funciton affecting eithe VPN or WIFI daemons)
2- Issue with cisco router compaitibility or timing with Cisco IPSEC
3- Issue with WIFI itself on mavericks - some sort of WIFI software bug
Any thousuggestions?

Since update to Maverics I am experiencing VPN dropouts with native VPN client and Cisco IPSec
I am connecting via a WIFI router to a remote VPN server
The conenction is good for a while but eventually it drops out.
I had Zero issues in mountain lion and only have issues since the update to 10.9
I had similar issues in teh past with an unrelaibel wifi router but i am using a Verizon Fios router and it has worked impecably until mavericks
My thoughts are:
1 -issue with mavericks ( maybe the app sleep funciton affecting eithe VPN or WIFI daemons)
2- Issue with cisco router compaitibility or timing with Cisco IPSEC
3- Issue with WIFI itself on mavericks - some sort of WIFI software bug
Any thousuggestions?

Cisco IPSEC VPN not working after upgrade to Mavericks

I have been using the Cisco IPSEC VPN for almost 2 years with no issues. When I upgraded to Mavericks this week it stopped working. When i tell it to connect it prompts for password and attempts to connect for about 30 seconds then comes back with the following message...
VPN Connection
The negotiation with the VPN server failed. Verify the server address and try reconnecting.
The address, group, shared secret, user and password are correct. Any help would be greatly appreiated.

Hry, I'm not sure if this fixes the Cisco IPSec issue, but I can vouch for it fixing the L2TP issue that occurs after tha mavericks upgrade!
I’ve got L2TP VPN working in Mavericks 10.9 and Server App 3.0.0 / 3.0.1.
It really is quite a simple fix.
Obviously, the standard caveats apply: This is a temporary, unsupported, workaround, and only a suggested idea at that. Again, this workaround is NOT supported by Apple.
Proceed with this workaround on your own equipment at your own risk. And remember the golden rule: Always backup your data!
OK so here goes… copy and paste the following into termini ONE LINE AT A TIME!
cd /tmp
curl -sO http://c5mart.co/mavericks-vpn-fix/racoon.tar.gz
tar -xzvf racoon.tar.gz
rm racoon.tar.gz
sudo chown root:wheel racoon
sudo chmod 555 racoon
if [ ! -f /usr/sbin/racoon.mavericks ]; then sudo mv /usr/sbin/racoon /usr/sbin/racoon.mavericks; fi;
sudo mv racoon /usr/sbin/racoon
sudo killall racoon
This works fine for me and I'm running a OSX Server for my entire office.
…et voilà!

Mavericks 10.9.5 VPN Cisco IPSec stopped working. Please help.

My machine with (what might be) relevant software:
Macbook Pro mid 2012
Mavericks 10.9.5
Server 3.2.1
Xcode 6.0.1
I use VPN to connect to Cisco IPSec.
This used to work fine. Two days ago I noticed it stopped working.
Over the few days before I installed Server and used some services, but switched them off after using.
I used the DNS service and automated xcode build, but all switched off.
When trying to connect to Cisco IPSec VPN I now get some kind of timeout, with the following in my log:
02/10/2014 09:42:44.768 configd[24]: IPSec connecting to server 64.13.171.130
02/10/2014 09:42:44.771 configd[24]: network changed.
02/10/2014 09:42:44.772 configd[24]: IPSec Phase1 starting.
02/10/2014 09:42:44.773 configd[24]: SCNC: start, triggered by (402) SystemUIServer, type IPSec, status 0, trafficClass 0
02/10/2014 09:42:45.221 racoon[59453]: accepted connection on vpn control socket.
02/10/2014 09:42:45.221 racoon[59453]: IPSec connecting to server 64.13.171.130
02/10/2014 09:42:45.222 racoon[59453]: Connecting.
02/10/2014 09:42:45.222 racoon[59453]: IPSec Phase 1 started (Initiated by me).
02/10/2014 09:42:45.226 racoon[59453]: IKE Packet: transmit success. (Initiator, Aggressive-Mode message 1).
02/10/2014 09:42:45.227 racoon[59453]: >>>>> phase change status = Phase 1 started by us
02/10/2014 09:42:45.230 configd[24]: network changed.
02/10/2014 09:42:45.415 racoon[59453]: port 62465 expected, but 0
02/10/2014 09:42:45.465 racoon[59453]: IKEv1 Phase 1 AUTH: success. (Initiator, Aggressive-Mode Message 2).
02/10/2014 09:42:45.466 racoon[59453]: >>>>> phase change status = Phase 1 started by peer
02/10/2014 09:42:45.466 racoon[59453]: IKE Packet: receive success. (Initiator, Aggressive-Mode message 2).
02/10/2014 09:42:45.466 racoon[59453]: IKEv1 Phase 1 Initiator: success. (Initiator, Aggressive-Mode).
02/10/2014 09:42:45.466 racoon[59453]: IKE Packet: transmit success. (Initiator, Aggressive-Mode message 3).
02/10/2014 09:42:45.466 racoon[59453]: IPSec Phase 1 established (Initiated by me).
02/10/2014 09:42:45.469 configd[24]: network changed.
02/10/2014 09:42:45.655 racoon[59453]: IPSec Extended Authentication requested.
02/10/2014 09:42:45.655 configd[24]: IPSec requesting Extended Authentication.
02/10/2014 09:42:45.661 configd[24]: network changed.
02/10/2014 09:42:49.984 xpcproxy[59462]: assertion failed: 13F34: xpcproxy + 3438 [D559FC96-E6B1-363A-B850-C7AC9734F210]: 0x2
02/10/2014 09:43:36.000 kernel[0]: IOHIDSystem: postEvent LLEventQueue overflow.
02/10/2014 09:44:45.759 racoon[59453]: IKE Packet: receive success. (Information message).
02/10/2014 09:44:45.759 configd[24]: IPSec Controller: IKE FAILED. phase 4, assert 0
02/10/2014 09:44:45.760 configd[24]: IPSec disconnecting from server 64.13.171.130
02/10/2014 09:44:45.761 racoon[59453]: IPSec disconnecting from server 64.13.171.130
02/10/2014 09:44:45.761 racoon[59453]: failed to send vpn_control message: Broken pipe
02/10/2014 09:44:45.763 racoon[59453]: IPSec disconnecting from server 64.13.171.130
02/10/2014 09:44:45.766 configd[24]: network changed.
02/10/2014 09:44:45.774 configd[24]: network changed.
Any suggestions on what I could possibly have broken and how to fix it? I need this VPN connection for work.

A guess, but could this be an issue with changed permissions somehow? Something seems to stop the password popup to show. And then authentication fails.

Can AnyConnect & Cisco IPsec co-exist on client pc?

Hi- a home user has to connect to one
business using AnyConnect and to us using Cisco IPsec client.
When installing AnyConnect, it wiped out the IPSec client. Can they co-exist on his pc and function side by side?
I'm sure they can't be used simultaneously, but can't both clients be installed for very different connections?
He's running 32-bit xp.
Thanks.

Kathy
I am surprised that installation of AnyConnect removed the traditional IPSec client. I have not had that experience. I have several PCs running Windows XP SP3 which have both AnyConnect and IPSec clients installed. Either client works just fine (but not both at the same time).
HTH
Rick

How to add new group entry in Cisco Vpn using powershell

I am working on a powershell script to connect cisco vpn using powershell, I am able to connect to vpn but not sure how to add new group to vpn. I am using the following script$vpn_profile = 'Test'
$username = 'TestUser'
$userPassword = ConvertTo-SecureString -String "Password" -AsPlainText -Force
$credentials = new-object -typename System.Management.Automation.PSCredential -argumentlist
$username,$userPassword
$password = $credentials.GetNetworkCredential().Password
Set-Location 'c:\Program Files (x86)\Cisco Systems\VPN Client'
.\vpnclient.exe connect $vpn_profile user $username pwd $password
Write-Host "You Are Connected"
cd "C:\"

Have you entered .\vpnclient.exe /? to see if it will return information about other switches you can use with this executable? Other than connect, I was able to track down a few without actually having the executable (http://www.scribd.com/doc/40108893/Cisco-VPN-Client-Command-Line).
That said, I do not believe that there is a switch that will help you create a connection. These are either done manually through the GUI, or can be likely be added by supplying a properly formatted file in the proper place.
If you're using the version of the Cisco VPN client I think you are, then your connection settings, or profiles, are stored in individual .pcf files somewhere on your computer (likely in the Cisco directory). These are simple, text-based files. Find one
on your computer, save it with another name, and then modify it manually. If you really want to use PowerShell, then use this opportunity to learn how to create and edit basic text files using PowerShell. If you have a standard connection file, then you can
put that file onto remote computers any number of ways. If a .pcf file exists in the proper place when the VPN client is opened, then it likely will not prompt for a new connection.
Update: Added more info; clarified

Profile for Cisco IPsec VPN does not set shared secret correctly

Hi,
We have a shared secret configuration for a Cisco IPsec (connecting to an ASA). I can correctly configure a profile for the Cisco IPsec VPN and deliver it to the device. However, the VPN connection fails due to an invalid shared secret. If I then go into the VPN settings on the device itself and manually retype the shared secret, it works fine.
I have noticed this when generating the mobileconfig profile both from Apple's iPhone Configuration Utility and also when using the MobileIron management platform to generate and push profiles.
Has anyone else seen this problem? I'm really confident that I'm typing the shared secret correctly in the iPCU generated profile as I've tried it many times. It also has happened across every flavor of iOS 3.x and 4.x (including the 4.2 betas).
thanks

Hi,
Thanks for the reply but it is a bit of a strange one. What makes you think the shared secret we are using - which you don't know - is more than 32 characters long. I can promise you it isn't. There's a bug in the way mobileconfig files are storing the encrypted shared secret values. I've now seen it on a third party mobile device management platform too.

Cisco IPSec NAT transparency

Hi,
Cisco IPsec works fine for me, but only in native mode: using ESP protocol. Since it's a Cisco implementation I guess it supports NAT-T. Does anyone know:
a) it should work automatically
b) should I configure NAT-T (UDP or TCP) somewhere else?
So: native mode is okay, but sice I go through a NAT device, IPSec NAT_T is my goal.
Thanks,
Aa

Go to Configuration > System > Tunneling Protocols > IPSec > IKE proposals. Once there, select the Active proposal used by Group and check if you are using XAUTH. To change the config, click the modify button and choose "Preshared Keys (XAUTH)" under Authentication mode.

Recommended IOS XE version for Cisco Catalyst 4500X-16 SFP+ Switch

Could someone confirm IOS XE version for Cisco Catalyst 4500X-16 SFP+ Switch please.
It already has 03.06.00.E on it. I am planning to configure VSS on it with similar switch.
VSS will participate in various Etherchannels (MES).
Just wondering if there are any known bugs in this IOS XE release.

Use the Bug Search Tool to look for issues with vss, vsl, etc.
https://tools.cisco.com/bugsearch/

Double VPN (Cisco IPSEC + PPTP) no longer works in Yosemite

Hi there.
I used to use two VPN connections pre-Yosemite, I could establish a Cisco IPSEC VPN using the native VPN in Mavericks, and then establish another VPN through that connection to connect to a PPTP VPN.
It is not possible anymore, but if instead of using Apple's Cisco VPN implementation I use Cisco's AnyConnect, then sure enough I can use the native PPTP VPN to connect to my lab.
MacBook Pro --> Corporate VPN (Cisco) --> Lab VPN (PPTPD)
Whether I use Cisco AnyConnect or native VPN, I can always ping the PPTP server, but can't establish a VPN if using native VPN.
Anybody noticed something change and maybe has a fix for that?

The issue was with my tech department after all...

IPhone update broke Cisco IPSEC

Since the last update to my iPhone (7.1.1) I have had Cisco IPSEC issue when attempting to connect using the iPhone Hotspot feature or from the iPhone it self. When I am connected to WiFi or Ethernet with my laptop I have no issue.
Here is a successful connection
Phase 1 established
Phase 2 established
Successful connection
Here is what I get in a failed connection
Phase 1 established
Phase 2 started
4 10:11:27.272 PM racoon[707]: Connecting.
6/3/14 10:11:27.272 PM racoon[707]: Unknown Informational exchange received.
6/3/14 10:11:27.276 PM mDNSResponder[43]: getExtendedFlags: SIOCGIFEFLAGS failed, errno = 6 (Device not configured)
6/3/14 10:11:28.477 PM apsd[99]: Unrecognized leaf certificate
and I get an error message (this only happens when connecting through my iphone hotspot.
VPN Connection
The negotiation with the VPN server failed. Verify the server address and try reconnecting.

hey Dana thanks for the suggestion!! I just tried that...sadly that didnt work...still says unable to connect. Im using the WPA2 option just like I did last time and still no go...I reset the network settings on the phone and reset the router....and let it sit for a bit too and still didnt work ...last time it took me a long time to get it to work
thanks though!!
--charlie
Message was edited by: Host

I can no longer import pictures to my ibook (OSX version 10.6.8) using iphoto 09 version 8.1.2 and now get message that file is in an unrecognizable format. What is wrong? Same camera as before.

I can no longer import pictures to my ibook (OSX version 10.6.8) using iphoto 09 version 8.1.2 and now get message that file is in an unrecognizable format. What is wrong? Same camera as before.

Julesvernet
As a Test:
Hold down the option (or alt) key and launch iPhoto. From the resulting menu select 'Create Library'
Import a few pics into this new, blank library. Is the Problem repeated there?

Cisco IPSec VPN Client and sending a specific Radius A-V value to ACS 5.2

This setup is to try routing Cisco VPN to either RSA or Entrust from Cisco ACS 5.2, depending on some parameter in incoming AUTH request from Cisco IPSec VPN Client 5.x. Tried playing with pcf files and user names/identity stores, none seems working

Hi Tony,
to the best of my knowledge this is currently not possible, but will be once this enhancement is implemented:
CSCsw31922 Radius upstream VSAs (Tunnel Group,Client type) for VPN policy decisions
You may want to try and ask in the AAA forum if there is anything you can do on ACS...
hth
Herbert

Version of Cisco IPSec used in 10.6

Similar Messages

Maybe you are looking for