Windows 7, XP and VPN Service

Hi All,
Running SLS 10.6.5 with VPN Service. Configured for L2TP.
Works perfect with a half dozen Mac clients connected. plus off and on a half dozen more iOS clients, over both WiFi and 3G - so needless to say, service is configured and firewalls are all configured appropriately.
The issues are:
1) WIndows XP (over NAT-T) - does this work at all with L2TP? From what I can see it just hangs on the XP side and fails to negotiate a phase 1 on the server side? Do I need to hack an anonymous.conf together that avoid AES since XP doesn't support that? The default config should allow failback to 3DES but I've never seen it happen since OS X, iOS and Windows 7 all support AES just fine and Windows XP is never able to connect.
2) Windows 7: I can connect. Everything works. Then I disconnect. Sometimes I can't reconnect again. Sometimes I can. If you wait an hour for the SAD tables to expire the entries (3600 seconds, minus connect time) it works again, but you basically are out of luck for making another connection run again sometimes until this happens.
As a side - I'm noticing the SAD entries on the server side are pretty lazy at expiring - specifically, I have 3 people connected right now (should be 6 entires, one in and out for each) but there are 15 SAD entries still on my server (from 45 minutes ago when there was 7 people) connected. Even here, this should be 14 entries but SLS 10.6.5 has left an orphan. It tends to be that the server to remote SAD gets cleared but there is almost always a stray remote to server SAD that gets left lying around.
Any ideas, or should I call Apple support and slog this out with them?

I have a similar problem.
Slow Leopard Mini server behind a firewall running both L2TP and PPTP.
At home Macs and iPhones connect to the VPN without problem over L2TP.
Windows XP and Vista fail to connect over L2TP, they report server not responding, and no trace on the server side, like they did not reach it at all.
If I use PPTP both the Macs and the Windows machines manage to connect but are disconnected after a dew seconds. The trace on the server side is:
2011-01-30 09:15:36 WET Incoming call... Address given to client = XXXXXXXXXXXX
Sun Jan 30 09:15:36 2011 : Directory Services Authentication plugin initialized
Sun Jan 30 09:15:36 2011 : Directory Services Authorization plugin initialized
Sun Jan 30 09:15:36 2011 : PPTP incoming call in progress from 'XXXXXXXXXXXXXXXX..
Sun Jan 30 09:15:36 2011 : PPTP connection established.
Sun Jan 30 09:15:36 2011 : using link 0
Sun Jan 30 09:15:36 2011 : Using interface ppp0
Sun Jan 30 09:15:36 2011 : Connect: ppp0 <--> socket[34:17]
Sun Jan 30 09:15:36 2011 : sent [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0x204e609e> <pcomp> <accomp>]
Sun Jan 30 09:15:39 2011 : sent [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0x204e609e> <pcomp> <accomp>]
Sun Jan 30 09:15:42 2011 : sent [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0x204e609e> <pcomp> <accomp>]
Sun Jan 30 09:15:45 2011 : sent [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0x204e609e> <pcomp> <accomp>]
Sun Jan 30 09:15:48 2011 : sent [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0x204e609e> <pcomp> <accomp>]
Sun Jan 30 09:15:51 2011 : sent [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0x204e609e> <pcomp> <accomp>]
Sun Jan 30 09:15:54 2011 : sent [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0x204e609e> <pcomp> <accomp>]
Sun Jan 30 09:15:57 2011 : sent [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0x204e609e> <pcomp> <accomp>]
Sun Jan 30 09:16:00 2011 : sent [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0x204e609e> <pcomp> <accomp>]
Sun Jan 30 09:16:03 2011 : sent [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0x204e609e> <pcomp> <accomp>]
Sun Jan 30 09:16:06 2011 : LCP: timeout sending Config-Requests
Sun Jan 30 09:16:06 2011 : Connection terminated.
Sun Jan 30 09:16:06 2011 : PPTP disconnecting...
Sun Jan 30 09:16:06 2011 : PPTP disconnected
2011-01-30 09:16:06 WET --> Client with address = XXXXXXXXXXXXX has hungup
The bottom line is that I cannot connect with windows machines at all and with Macs only over L2TP. This was tested with all the client machines behind the same router.
Any ideas would be appreciated.
J
Message was edited by: Joaquim Carvalho

Similar Messages

Windows Vista 64 and VPN

Hi,
which possibilities i have to create a VPN Tunnel between a ASA5520 and Windows Vista Enterprise x64?
Is possible to use the Windows integrated "Firewall and advanced security"? There it seems to be the possibility to create a IPSEC-Tunnel. The only problem is that i don't know how.
regards
Erwin

The interated Firewall in Vista doen not give the flexibility in configuring the IPsec tunnel, I doubt if that would work with ASA. However there are other third party tools that can be used for this purpose even cisco has a tool for VPN conection to vista but certain issues are still to be removed. Otherwise you can use tools to stimulate WinXP and can have your old VPN client to work.

Windows 2012 routing and remote access service with same subnet

I have internal server IP range -192.168.1.0/24
Windows routing and remote access service with vpn client IP -192.168.11../22
client side IP subnet is -192.168.1.0/24
So we wan routing \ NATING between 192.168.1.0/24 to 192.168.11.0/22 so if vpn user try to ping 192.168.11.5 it should internally forward all request to 192.168.1.5
Don't forget to mark helpful or answer connect me :- http://in.linkedin.com/in/satya11 http://facebook.com/satya.1000

Hi,
According to your description, my understanding is that VPN client and internal network has the same IP range -192.168.1.0/24. And you want to transfer internal network from IP address 192.168.1.0/24 to 192.168.11.0/22.
Agree with Charles David’s point of view. The easiest way to fix routing confusion would be to either change the VPN subnet or the VPN client subnet.
Or, if you configure Windows Server(RRAS) as VPN server, you may enable NAT to transfer internal IP address:
1. Open RRAS, add NAT.
2. New interface to NAT and configure it as public interface.
3. Open Address Pool tab, add IP address range 192.168.11.0/22.
4. Click Reservations, add reserved IP(192.168.11.0/22) and corresponding internal IP(192.168.1.0/24) one by one.
This would be a lot of workload. Besides, you may use 3rd party devices to transfer subnet IP addresses.
Best Regards,
Eve Wang
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Cisco E4200 and VPN and Vontage Phone service.

I have a E4200 Router. I would like to subscribe to a VPN service and possiby flash the router with DD-WRT so I can take advantge of of the VPN across my network and allow my various clents ( Roku, Boxee Box, etc ) to have access to the VPN. My question is what is required to to have access to VOIP say using Vontage. Will the router be cable of this ? Is it possible to be able to use the commerical VPN service using Linksys firmware ? It appears my only option is to use third party firm ware ,such as DD-WRT or Tomato for the VPN. I've heard some talking about using TWO routers, but I haven't been seen much detail on this option.
Thanks !
Glenn

VPN Services that I have heard of use static DNS entries which you can setup in your routers DHCP settings
DD-WRT may not be required for what you mention
Vonage you just plug in (A QOS policy isn't required unless you have bandwidth issues)
The router can do this with Linksys firmware or DD-WRT
VPN passthrough is supported but your VPN connections have to be setup in your computers and devices
Third party software isn't required unless you experience firmware issues
Two routers are only required if you need to extend your wireless into areas where you have low signal strength
I can provide detail on adding multiple router onto your network.
Please remember to Kudo those that help you.
Linksys
Communities Technical Support

VPN Client and AAA services on a Cisco ISR Router

Hi, my name is Jim, and I was just promoted as a trainer for the company I work for. Part of my new challenge is understanding how the configuration files in both my Terminal Services/VPN Router and Core Router work, so for many of you, these questions are going to seem very fundamental, but please help, I am an instructor in training. I hold a CCNA, CCNA-Wireless, and a CCSI cert, but I have little working experience in building and maintaining a lab....hence the need for this inquiry.
So to my questions. In our lab environment, we have a router that acts as our terminal services router and VPN router. Each laptop that connects to the lab has the Cisco VPN client loaded onto it, as well as my laptop that I teach from. My questions are these:
1. What parts of the AAA output of the running configuration tell me how to configure the VPN clients on my laptops?
2. I am using crypto key generate RSA at 1024 bits on the VPN/TS router, so does that tell me how to configure some part of the client?
3. In our lab, we are going to use a direct connection to an AP to get connected to the network, and how will the absence of an Internet connection affect the settings on the VPN client, or will they?
4. Are there helpful articles I can read that will answer some or all of these questions?
Thanks in advance,
Jim

Hi Jim,
congratulations
Assuming a basic setup, your router will have something like this:
crypto isakmp client configuration group MyGroup
key cisco123
So on the client, you configure it to use MyGroup as the group name, and cisco123 as the (group) password.
I'm not sure I understand your question #3 and what you mean by "AP" (Access Point? So WiFi?). In any case you don't need Internet access per se, as long as you have network (IP) connectivity between the host running the vpnclient and the VPN router.
Does this help?
Herbert

Redirect Printer is not working in windows 2008 R2 Server( Server Running as AD and Terminal Service(both role in single server))

Dear Team
i need solution from Microsoft for the issue;
My infrastructure
- Windows Server 2008 R2 (Role - AD and Terminal Service)- Updated
- Client Machine running with windows 7 pro (Updated)
- Client Using RDP Client to connect Windows 2008 Terminal Session
- All are working fine, but Redirect Printing is not working (Through Windows 7 Pro) ... (HP Laser Jet 1020 plus - attached in Client PC)
- it is working fine from Windows XP
- i was done All terminal setting in both end, also try RDP Login with Administrator User, but issue is not resolve;
What Microsoft can say about the issue;
Thanks & Regards,
VIMAL PRAJAPATI | 09824111686

Have you checked the Print Service log in event viewer?
Here's How.
I have the Microsoft XPS driver on my clients, so I use that fact to my advantage below.
Click Start Button/Administrative Tools/Remote Desktop Services/Remote Desktop Services Manager on the RDSH server
Click the Sessions tab. PC’s are listed Under Client Name by their computer name. Take Note of the corresponding
ID. We will use this to locate the Printer information in the Event Log.
In the Event Log open Application and Services Logs/Microsoft/Windows/Print Service/Admin/ and Find the Event ID 823 entry that has the corresponding ID from the sessions tab you previously noted.
This Event Log Entry is created at Logon and you can only get the session ID when they are logged in.
This tells you what client printer was mapped for the client. The name that appears is the name of the Printer that was set on the client when the printer was installed.
See if you see any errors here.
If you see Event Id 823 with the following message “The default printer was changed to Microsoft XPS Document Writer,winspool,Ne00:. See the event user data for context information.” Twice in a row with no other messages in between, and the first occurs
at the time the user logged in, then their printer was not properly redirected.
You see the Microsoft XPS driver mapped for each session prior to Easy Print redirecting the client machine’s Default Printer.
Since your printer is the HP 1020 I would bet the driver on the client does not work with Easyprint. I would try the the HP Universal Print Driver or the driver for a printer that is very close, like the HP 1018.
Thanks,
Jeremy

I have a 4th gen ipod nano which will not sync after restore. i have run itunes diagnostics and attached thMicrosoft Windows Vista Home Premium Edition Service Pack 2 (Build 6002)e results. can you help please?

Microsoft Windows Vista Home Premium Edition Service Pack 2 (Build 6002)
Sony Corporation VGN-NS20E_P
iTunes 10.6.1.7
QuickTime 7.7.1
FairPlay 1.14.37
Apple Application Support 2.1.7
iPod Updater Library 10.0d2
CD Driver 2.2.0.1
CD Driver DLL 2.1.1.1
Apple Mobile Device 5.1.1.4
Apple Mobile Device Driver 1.59.0.0
Bonjour 3.0.0.10 (333.10)
Gracenote SDK 1.9.5.502
Gracenote MusicID 1.9.5.115
Gracenote Submit 1.9.5.143
Gracenote DSP 1.9.5.45
iTunes Serial Number 0012ACE4032C3EC8
Current user is not an administrator.
The current local date and time is 2012-05-26 22:17:26.
iTunes is not running in safe mode.
WebKit accelerated compositing is enabled.
HDCP is not supported.
Core Media is supported.
Video Display Information
Intel Corporation, Mobile Intel(R) 4 Series Express Chipset Family
Intel Corporation, Mobile Intel(R) 4 Series Express Chipset Family
**** External Plug-ins Information ****
No external plug-ins installed.
**** Network Connectivity Tests ****
Network Adapter Information
Adapter Name: {78DA402D-66EE-4084-9D5E-8A010E0B8437}
Description: Atheros AR928x Wireless Network Adapter
IP Address: 192.168.2.8
Subnet Mask: 255.255.255.0
Default Gateway: 192.168.2.1
DHCP Enabled: Yes
DHCP Server: 192.168.2.1
Lease Obtained: Sat May 26 19:10:42 2012
Lease Expires: Sat May 26 19:10:41 2012
DNS Servers: 192.168.2.1
Adapter Name: {C1458549-CA0B-4A3B-8F8E-9259653AA0DD}
Description: Marvell Yukon 88E8055 PCI-E Gigabit Ethernet Controller
IP Address: 0.0.0.0
Subnet Mask: 0.0.0.0
Default Gateway: 0.0.0.0
DHCP Enabled: Yes
DHCP Server:
Lease Obtained: Thu Jan 01 00:00:00 1970
Lease Expires: Thu Jan 01 00:00:00 1970
DNS Servers:
Active Connection: LAN Connection
Connected: Yes
Online: Yes
Using Modem: No
Using LAN: Yes
Using Proxy: No
Firewall Information
Windows Firewall is on.
iTunes is NOT enabled in Windows Firewall.
Connection attempt to Apple web site was successful.
Connection attempt to browsing iTunes Store was successful.
Connection attempt to purchasing from iTunes Store was successful.
Connection attempt to iPhone activation server was unsuccessful.
The network connection timed out.
Connection attempt to firmware update server was successful.
Connection attempt to Gracenote server was successful.
Last successful iTunes Store access was 2012-05-26 20:57:29.
**** Device Connectivity Tests ****
iPodService 10.6.1.7 is currently running.
iTunesHelper 10.6.1.7 is currently running.
Apple Mobile Device service 3.3.0.0 is currently running.
Universal Serial Bus Controllers:
Intel(R) ICH9 Family USB Universal Host Controller - 2934. Device is working properly.
Intel(R) ICH9 Family USB Universal Host Controller - 2935. Device is working properly.
Intel(R) ICH9 Family USB Universal Host Controller - 2936. Device is working properly.
Intel(R) ICH9 Family USB Universal Host Controller - 2937. Device is working properly.
Intel(R) ICH9 Family USB Universal Host Controller - 2938. Device is working properly.
Intel(R) ICH9 Family USB Universal Host Controller - 2939. Device is working properly.
Intel(R) ICH9 Family USB2 Enhanced Host Controller - 293A. Device is working properly.
Intel(R) ICH9 Family USB2 Enhanced Host Controller - 293C. Device is working properly.
FireWire (IEEE 1394) Host Controllers:
RICOH OHCI Compliant IEEE 1394 Host Controller. Device is working properly.
Connected Device Information:
JULES'S IPO, iPod nano (4th Generation) running firmware version 1.0.4
Serial Number: YM839W553QU
Bus Speed: 61440
Most Recent Devices Not Currently Connected:
iPhone 4S running firmware version 5.0.1
Serial Number: DNWH3R84DTD2
**** Device Sync Tests ****
No iPod, iPhone, or iPad found.

Hello, VvioletT.
Thank you for visiting Apple Support Communities.
I see you are experiencing issues syncing your iOS device. Here are a couple articles that I would recommend going through when experiencing this issue.
iOS: Troubleshooting USB-related alerts when syncing
http://support.apple.com/kb/TS5254
Resolve issues between iTunes and security software
http://support.apple.com/kb/ts3125
Cheers,
Jason H.

How to find out the IPS and DS Service Pack and patch levels in windows server.

Hi,
I have installed the Information Platform Services 4.0 and Data services 4.0 in windows QA system, now we need to install the same version of IPS & DS in windows PRD system for this how could we find out the exact version of IPS & DS ( Service pack and patch levels ) and where we can find the same.
Many Thanks,
Sudheer

Hi Sudheer,
On a Windows Operating Systems you can check the “Programs and Features” in control panel.You can see a list of both the Name and Version number of SAP BusinessObjects that is installed.
option 2:
Open CMC go to Settings. In the properties, you will find the Product Version.
Please check below SAP notes for more information.
http://service.sap.com/sap/support/notes/1602088
Regards,
Pavan

I updated iTunes 10.3.1 today, and now it won't let me open itunes it keeps saying error 7 (windows error 14001) and also says (apple mobile failed to start verify significant privileges to start system services)

I updated iTunes 10.3.1 today, and now it won't let me openitunes it keeps saying error 7 (windows error 14001) and also says (apple mobile failed to startverify significant privileges to start system services) I have unstalled it severaltimes, tried repairing it also switched off all security software and checkedall files are deleted in local disk (program file) but still no look. Please cansomeone help

For general advice see Troubleshooting issues with iTunes for Windows updates.
The steps in the second box are a guide to removing everything related to iTunes and then rebuilding it which is often a good starting point unless the symptoms indicate a more specific approach. Review the other boxes and the list of support documents further down the page in case one of them applies.
The further information area has direct links to the current and recent builds in case you have problems downloading, need to revert to an older version or want to try the iTunes for Windows (64-bit - for older video cards) release as a workaround for performance issues or compatibility with QuickTime or third party software.
Your library should be unaffected by these steps but there are also links to backup and recovery advice should it be needed.
Regarding AMDS failures there is a hint in another thread that disabling the Windows Firewall before attempting to reinstall may help, otherwise take a look at the steps outlined in this post. Re: Can't install iTunes 12.1 on Windows 7 64-bit. I know they look a little daunting, but the process of generating the logs themselves isn't that hard to do. Extracting useful information from them is still a challenge but maybe something will leap out. If you want to post the log for the failed components for me to have a look at here or in the other thread please edit out any personal information, particularly your email address, first.
tt2

Error in starting nidevldu and nipxirmu services (windows event viewer)

A computer running Windows XP SP1 and a Visual basic (V6.0) application that I've developped had crashed several times. I've seen lots of errors in the Windows event viewer saying that the nidevldu and nipxirmu services were trying to start (exact french message : Le service nidevldu est en attente de démarrage et Le service nipxirmu est en attente de démarrage). These messages are real errors (not warning or informations).
I use a 6034E PCI card, Visual basic V6.0 and NI-DAQ 7.4.
The crashes I've seen may be linked with this problem.
Is there a solution?

Hi,
I think that you are not going to be starting and stopping the devldu service in normal circumstances... due to crashes !
The firsts steps you have to focus on is to optimize your program in order to avoid crashes, which is not a normal way of work I guess. Then you will be able to avoid these messages!
Regards,
David D. - Application Engineer - NI

I am trying to download Itunes onto my windows 7 pc and its say that, "Verify that you have sufficient privileges to start system services."

I am trying to download Itunes onto my windows 7 pc and its say that, "Verify that you have sufficient privileges to start system services." So what do I do because thats all it says and then it gives me three options I can: abort, try again or Ignore. I have tried all three and I still can't download Itunes, so help please!

Try the following user tip:
Troubleshooting issues with iTunes for Windows updates

Oracle Application server Forms and Report services 10.1.2.0.2 on Windows 2

Hi,
I am installing the Oracle Application server Forms and Report services 10.1.2.0.2 on Windows 2003 R2, but the problem is that setup is not running on this Windows 2003 R2 version.
Any idea about this why it is not running.
Regards,
Iftikhar

You asked this
How can i find what is the latest version that i can upgrade this install to
I told you where to find the last update, I checked that version yesterday, the last update is 10.1.2.3, my misstake was to put a 0 before the 3.
You can go to Patches & update>Quick Links to: Latest Patchsets, Mini Packs and Maintenance Packs>Oracle Fussion Middle Ware> Look for you OS versión and CPU> No clic just put pointer over the links and you will see the last one.
And finaly could look for the CPU of Jul and Apr that as requirement they ask for version 10.1.2.3 (as I say I checked yesterday)
Greetings.

Recreate SAP and database services in Windows

Hi!
I'm running my sandbox in a wmware enviroment and yesterday the C: partion got corrupted and I managed to "save" the other drives where the SAP and database are installed.
Is there any way to recreate the SAP and database services in another Windows installation? (manually or automatically)
That way I don't need to reinstall the whole system....and no there is no backup or snapshot since the system is not complete.
But if I get the database to start I should be able to do a backup and then do a new installation and import the backup!?
Thanks for any input
rollo

What is the database platform?
If it is SQL Server try attaching the data & log files to another instance SQL instance at the same release & patch level, if that works the database is intact so recovery should be possible.
From there rebuild your vmware box and treat the SAP install as though you are doing a 'system copy' so -
-Install & patch Win2003
-Install & patch SQL Server
-Install a 'blank' SAP Central Instance & update kernel
-Attach SQL database
-Use the SAP's SQL Migration tools to prepare DB & instance
-cross fingers & startsap
-make a backup
Check out http://servcie.sap.com/instguides for the System Copy guide that matches your release
If that helps please reward points
Cheers
Danny

4.7EE on WINDOWS 2003 O/S: dispatcher and message service not working

Hi all,
i have installed 4.7EE on WINDOWS 2003 O/S, but my dispatcher and message service is not working, can you guys help me out to start my dispatcher and message service.
let me know the steps to get back my sap MMC UP.
thanks
Edited by: Julius Bussche on Jul 8, 2008 8:49 PM

Hi Muzzamil,
Welcome to SDN, but please use proper subject titles (and read the rules of engagement at the top of this forum page to avoid other reasons for locked threads).
Many thanks,
Julius

Reviewing Windows NT Rights and Privileges Granted for SQL Server Service Accounts

Hi Folks,
I am an experienced .NET apps developer who has been tasked with writing a bunch of technical controls for all the SQL Server instances on a domain.
So for the last month I have been diving in the deep end learning Powershell, dba and infrastructure tasks. This is still a work in progress, so be kind to me.. ;o)
So the task I am stuck on is described in the section on 'Reviewing Windows NT Rights and Privileges Granted for SQL Server Service Accounts' http://technet.microsoft.com/en-us/library/ms143504(v=sql.105).aspx
I have not been able to find cmdlets that gives me this information. I have found some exes which come frustratingly close like NTRights.exe. This lets me specify a computer name which is great, but only seems to let you set or deny permissions, not just
list them!
Any help with this would be very much appreciated as I am firmly stuck. As per comments above also bear in mind that up until around 1.5 months ago I had never used powershell / knew very much at all about SQL server admin etc. Feeling much more comfortable
with them now, but much less so with Active Directory/ windows permission structures etc so please can I ask anyone kind enough to reply to try and keep the acronyms down as much as humanly possible.. ;o)
Cheers
Kieron

Hi Kieron,
Take a look at this module, it makes permissions much easier to work with than what's currently available:
https://gallery.technet.microsoft.com/scriptcenter/PowerShellAccessControl-d3be7b83
Don't retire TechNet! -
(Don't give up yet - 13,085+ strong and growing)

Windows 7, XP and VPN Service

Similar Messages

Maybe you are looking for