Windows 8.1 VPN Server Setup - No Network softwaare to choose
Hi Everyone
Windows 8.1
Setting up an incoming VPN Server.
When I try to create a New Incoming Connection via Control Panel > Network and Sharing Center > Change adapter settings > Alt - F > New Incoming Connection.
The wizard appears so I check the User Account > Next > Check Through the Internet > Next bringing up the Allow connections to this computer window where I should be able select Networking software to be enabled and then go on
to click Allow Access button. The networking software to highlight window is blank. Using the Install... button below this window brings up the Select Network Feature Type window where I can highlight a feature (Client, Service or Protocol)
and click Add button . It returns to the Allow connections window which has not changed and nothing is added. Still blank.
How do I get the network software to be there to select?
I have done this on other machines and had no problems at all. It worked the way it should.
After I did an image and reset operating system, the VPN Server Setup worked as it should. Restored image as it is way to much work to rebuild the machine. So any ideas?
Any and all help will be appreciated.
Thanks in advance. Lowell
Hi,
Did you mean you have solved this problem by resetting Windows?
Regarding to current information, this issue can be caused by port settings or corrupted Windows components.
Please check if the VPN port 1723 has been set as allowed in both your Firewall and router settings pages.
Also, we may fix such issue by running following repair command:
NOTE: Please run these commands as administrator.
SFC /SCANNOW
dism /online /cleanup-image /restorehealth
For further help, you can upload %windir%\logs\CBS\cbs.log and %windir%\Logs\DISM\dism.log into Onedrive or similar file service and share the link here for our research.
Kate Li
TechNet Community Support
Similar Messages
-
Forwarding L2TP to an internal Windows 2008 R2 VPN server behind RV042
Hi all,
we have a Cisco RV042 router and we wanted to use a Win 2k8 R2 VPN server that is located behind it to handle L2TP VPN connections.
I have forwarded Ports 500 and 4500 UDP and Port 1701 TCP and UDP to the VPN server, but I cannot establish a connection from my Windows 7 machine. I'm getting error 809 after a timeout.
It is working from the iPhone and the Mac without problems.
I have already set the parameter "AssumeUDPEncapsulationContextOnSendRule" to 2 in the registry of both the client and the server but with no effect.
My guess is that I cannot forward "IP Protocol 50" from the RV042 and that the iPhone VPN does not care about that but the Windows VPN does and so it's not working. Or is it possible that the active PPTP server on the RV042 could interfere here? It should be using different ports though.
Any idea how I could make this setup work?
Thanks
Regards,
MichaelThis router is now supported on the Cisco forums since the sale of Linksys to Belkin. I had issues with L2TP with a different router. I just switched to PPTP instead. I've found PPTP much more forgiving between devices.
Please remember to Kudo those that help you.
Linksys
Communities Technical Support -
DHCP server admin - no network interfaces to choose from
When I first installed OSX server I was able to create a DHCP subnet range and my clients are still connecting to the server and working fine. Now if I go to edit my subnet range, nothing shows up under subnets. Also, if I attempt to add a subnet, the selection menu for Network Interface shows no interfaces. Both en0 and en1 are working properly otherwise. Any thoughts?
In Network Preferences -> Show: Network Port Configurations, are the network ports ticked?
-
RRAS - VPN Server and Client have same subnet
Hello,
We have a VPN server setup in RRAS on our 2008 R2 server. The VPN works fine. Clients can connect and get to resources on our server fine.
The issue is that one client has a subnet of 192.168.1.0/24 and the subnet our server uses is also 192.168.1.0/24.
When the client connects, he can get to resources on our server. However, he needs to be able to get to an IP address of 192.168.1.4 using Remote Desktop that is on his local network. He also needs to get on IP 192.168.1.3 via Remote Desktop on the remote
network.
Is there a way we can accomplish this without changing subnets?For anyone else who needs an answer to this, this is the batch file I created using these links:
http://pastebin.com/HV2GmDAk
http://superuser.com/questions/788924/is-it-possible-to-automatically-run-a-batch-file-as-administrator
Here is the content of it:
REM --add the following to the top of your bat file--
@echo off
:: BatchGotAdmin
REM --> Check for permissions
>nul 2>&1 "%SYSTEMROOT%\system32\cacls.exe" "%SYSTEMROOT%\system32\config\system"
REM --> If error flag set, we do not have admin.
if '%errorlevel%' NEQ '0' (
echo Requesting administrative privileges...
goto UACPrompt
) else ( goto gotAdmin )
:UACPrompt
echo Set UAC = CreateObject^("Shell.Application"^) > "%temp%\getadmin.vbs"
set params = %*:"=""
echo UAC.ShellExecute "cmd.exe", "/c %~s0 %params%", "", "runas", 1 >> "%temp%\getadmin.vbs"
"%temp%\getadmin.vbs"
del "%temp%\getadmin.vbs"
exit /B
:gotAdmin
pushd "%CD%"
CD /D "%~dp0"
rem You need to replace:
rem <VPN> with the Name of the VPN connection you created
rem <USER> with the vpn user
rem <PASS> with the vpn pass
rem @echo off
@echo make sure to be disconnected!
rasdial "Your VPN" /d
@echo start to connect to vpn
rasdial "Your VPN" username password
netsh interface ip show config name="Your VPN" | findstr "IP" > ip.dat
set /p ip= < ip.dat
del ip.dat
set ip=%ip:~-13%
@echo VPN IP is %ip%
@echo Delete 192.168.1.0 route
route delete 192.168.1.0
set target=192.168.1.3
@echo Add route for %target%
route add %target% mask 255.255.255.255 %ip%
timeout /T 3 > nul -
Lion Server Setup (Network Login/Mobile Account and more...)
Hardware:
Mac mini Intel Core i7, 2 GHz, 8 GB memory (Server) x 1
iMac 21.5" 2.8GHz Intel Core i7, 12 GB memory (Workstation) x 6
Operating System:
Mac OS X Server Lion 10.7.4 (11E53)
Mac OS X Lion 10.7.4 (11E53)
Relevant Software:
Server.app Version 10.7.4 (1.4.3)
Workgroup Manager Version 10.7 (400.3)
Server Admin Version 10.7 (355)
So my head's swimming with "I dunno's" and I've been perusing probably all the wrong threads trying not to sound like a noob and find the literature that will finally lead me to a solution. This is my first rodeo so make no assumptions about my experience (maybe).
Short Version
I can't login network users. I get an error "You are unable to log in to the user account "<%short_name%>" at this time. Logging in using >console tells me this No home directory: <path to home directory> i.e. /Network/Servers/department.domain.com/Department/Accounts/bbunny
If anyone can point me where to read, I will do so.
Perhaps a longer discussion on how to verify that the proper permissions exist on the share/home directory in question and what those would be.
More detail...
I want to setup a Mac Mini server to have network login accounts stored on the 2nd data volume in a directory we shall call Accounts*. Here all the "network users/logins" have their home directories, so that when they login at the workstation the idea is the workstation will sync their account and allow them to login, if the server is not available, the hope is I can configure it to allow them to login if they've logged in before and the files will sync when they are able. That being the ideal, I get the impression that for best practices, Apple is discouraging the use of mobile accounts that use Home Sync perhaps because it's reliability has been iffy, please advise. A windows user might think of this as "roaming profiles" but, if I understand it, its a little more than that.
Note, I do not want to login to the server and actively work on that network share, I want the account to be local and sync'd as needed. But I want the user to be able to sit at any of the 6 other workstations and see the same documents, emails etc. Obviously if the server is down, it won't be possible to authenticate, but I think it should have cached credentials that should allow the user to login if the server is down and still go about their work.
This is the small picture...there is a larger picture that involves, parallel virtual machines of Windows Server 2008 R2 on server and and Windows 7 on the client, ical, ichat and perhaps wiki's.
I apologize for the roughness of this question, in the interest of brevity, I have plenty of problems that led me here that I can expound upon if asked.
Also a silly question someone might know the answer too, Why does the login payload settings that I have pushed to a workstation device, sometimes vanish inconsistently upon logout?Ok, Some Good news and clearer understanding to disseminate in this post I hope it helps
"the Universe" so I am posting it here in my "ever-the-noob" blog on apple forums.
Problem
What do you do when you get an error when logging into a mobile account setup?
One symptom would be the error message below...
"You are unable to log in to the user account "<%short_name%>" at this time.
Logging in using >console You get the message…
"No home directory: <path to home directory>"
or
"You are unable to log in to the user account "<%short_name%>" at this time.
Logging in using >console tells me this No home directory: <path to home directory>
Solution
Do the check list…
Short Version
Sever Admin.app > Access (Key Component)
Check Permissions on directories for your file shares.
(The reason stuff doesn't work especially when you're rebuilding/recovering a server)
File sharing setup (Turned ON, Home sharing Enabled)
Directory Utility > Directory Editor or dscl
( Do not underestimate the importance of this part!!!!
Use white-gloves when you're handling it though!!! )
Workgroup Manager
(You're poopy "main" interface that really is a "window", not a "door", but maybe Apple likes to do things "Dukes of Hazard" style?)
Long Version
Check Sever Admin.app > Access
Make sure that your user has the "Proper" access. For me I created a test user from Server.app and saw what access he had as a way to "check myself for a properly created users" and because I think one is kind of on his/her own using WGM and duplicated the same access. (I was a little neater, though and did it with a group, not individual users, that would have been a mess!)
Server Admin.app > Access
Click the "+" sign, sort by UID and Add the imported users to the following Services…
( You can use a group, but understand when Server.app creates users they get added
individually to each of these groups. )
Address Book
AFP
iCal
iChat
Mail
Profile Manager
SMB
VPN
Check Permissions on directories for your file shares.
(That's an understatement) I could go in depth about all the crap I had to read about, I still
know I am missing a chunk of tech brain when it comes to the particulars. Basically, I boil
it down to this…
Permissions require thinking about things first with regards to POSIX permissions... good
ole ls, chmod, chgrp, chown to the rescue with ugo permissions or the old 755, 600 etc
stuff.
Apple's file-sharing access uses this as a starting point to see what the user is allowed to
access.
I also needed to use chflags once to unhide a file that I mucked around with using xattr.
I still haven't figured out why folders can lose their triangles, but I didn't find out if you cp or
move them from terminal, the triangles come back in the moved or copied directory. For a
minute I thought it was because cp alone doesn't preserve flag attributes, but mv actually
works by doing a cp that preserves the flags, unless it's a bug. I dunno.
This helped me get my file visible again...
chflags hidden path_to_file
chflags nohidden path_to_file
Read up on those manuals, if you're not a terminal type go to apples website
http://developer.apple.com/library/mac/#documentation/Darwin/Reference/ManPages/
or download...
http://www.bruji.com/bwana/ I thought that was cool.
or if you prefer to read the manual in pdf try…
man -t sharing | pstopdf -i -o ./Desktop/Sharing\ Manual.pdf
man -t chown | pstopdf -i -o ./Desktop/CHOWN\ Manual.pdf
man -t chmod | pstopdf -i -o ./Desktop/CHMOD\ Manual.pdf
man -t chgrp | pstopdf -i -o ./Desktop/CHGRP\ Manual.pdf
My basic guideline was avoid using ACLs if at all possible, if you try to use them, things
can get crazy complicated, take notes and plan, baby. If you read above, opening up
permissions wide is wrong though. You would restrict permissions tightly to begin with and
then place ACE (Access Control Entries) to specifically target the rights you want to enable.
Here's one that's obviously a novice attempt to do this, but since the novice is the only one
speaking…. here it is, Universe… >:P
sudo chmod -R +ai "admin allow read,write,delete,file_inherit,directory_inherit,search,list" Department/
That allowed my admin to do all the things a normal user could do so far… It fixed things for
my admin, which made me happy. I really hate having to authenticate or sudo just to see
the contents of a nested directory. I could explain it, and even give a few notes on why its
probably overkill, but I will attempt to look less stupid till "poked".
There's another command line utility I STILL haven't read, which may bear mentioning
because…well I haven't read it. umask (see wikipedia or unix.com)…I worked past my
problems without going into it so far, but obviously it's there, and it serves a purpose.
I also found this article helpful…and educational. :O
http://www.bresink.de/osx/300321023/Docs-en/pgs/ACL.html
( Its enlightening to hear the air whistling between a developer/coder's ears, still it's
apparent he has a clear idea what's going on.
Ever wonder why when you use get info to check or assign permissions it kind of
flakes out and doesn't take? Read this article! )
Second, if you can't obtain the "specific" permissions you need with POSIX, chmod also
can set the 2nd category of permissions, which windows users may be familiar with
Access Control Lists (ACLs) and here you get some really fine granularity...messy stuff.
All in all, if I felt I could guide you through these murky waters, I would, but I think I'll let
the professionals weigh in on that one and cut my wall-of-text to ribbons.
To heuristically check I would connect from a client as one or two of my users and see what
folders I could mount as a share, armored with an understanding of what ls -le@O * showed
me in Terminal.
3.) File sharing setup (Turned ON, Home sharing Enabled)
Here is an example of using command line sharing utility where each share is properly
labeled (that took a bit for me to figure out) still this share only enables the AFP share as
you can see from my flags.
sudo sharing -a /Volumes/Hard\ Drive/Department/Database -A Database-afp -F Database-ftp -S Database-smb -n Database -s 100 -g 000 -i 10
Then you do a sudo sharing -l and get back what you just did…
List of Share Points
name: Database
path: /Volumes/Hard Drive/Department/Database
afp: {
name: Database-afp
shared: 1
guest access: 0
inherit perms: 1
ftp: {
name: Database-ftp
shared: 0
guest access: 0
smb: {
name: Database-smb
shared: 0
guest access: 0
If you mess up the sharing command, you may not be paying attention (I wasn't) but there
are a lot of defaults that Apple will just assume you meant to do anyway and it won't read
any of your flags, you have to get it right or the flags will be defaulted.
( Basically I could tell I was bombing it for one, I explicitly only wanted afp working, but
the default was afp and smb. So each time I ran sudo sharing -l after I shot my sharing
command…back would come smb shared: 1 and I knew that wasn't right. Also my
custom names were defaulting to the name of the directory not the name I had
specified. )
I like to know what protocol my share is over so when it doesn't work, I know which protocol's
are connecting. It's not full-proof, but it's a bookmark. I wish the network browser would
identify the protocol that its available listed shares are using, because small visual queues
like that help when you're trying to see what works. Maybe that's something I should
investigate via the command line?
As a note about reading forums, I discovered using command line that "\" is kind of like a
way of going to next line neatly with long commands…."\ " is a way to insert a space. As you
can see above where I have a volume with a space in it.
Removing shares was a little trickier though, sharing -r Share\ With-space didn't work….I
had to enclose it in quotes and do "Share With-space" instead. So nooby beware!
( *nix users are now rolling their eyes at this tip. )
I wasn't sure how you enabled a share for home directories from the command line, maybe its
in the manual, but I was up to my eyeballs in manuals already so I haven't gone back to
revisit this question since my work around was to go to Server.app and verify that what I set
up in the sharing in terminal was being reflected in the gui…sort of my own MVC
(model-view-controller) check.
4.) Directory Utility > Directory Editor or dscl
Make sure what you see in WGM and Server.app are reflected here….to that question let's
take a journey where I did some exploring about that.
Ever really wonder "WHY CAN"T I REMOVE AN OLD HOME DIRECTORY SHARE?!!!"
Ah, then you will - LOVE - this tip…
( Provided my testing or yours, later, doesn't prove that in my ignorance I've broken
Open Directory. Remember, WHITEGLOVES!!!! but here we get a little dirty. I think of
OD as Apple's Registry, but that's not what it is at all. However, you as the user do have
to "****" around in it from time to time. )
I scoured the forums and everyone was saying things like "You have to change your server
role" etc. which seemed a little bit dumb to me (dumb because you're pushing views around
not "controlling"), and well, yea, that share that I couldn't modify or delete was REALLY
bugging me.
Now hmm… Before you do ANYTHING, how do you try to not hurt yourself…in Windows you
can make a Registry Backup….(yea bad analogy) In Server Admin.app you can go to your Open
Directory Service > Archive and Choose a place to Archive your information. (Figure this out by
yourself, this is getting long…sheesh! It's easy. Restoring is just as easy and painless.)
Before we can remove the entry we "SEE" in WGM we should make sure no
one has it selected so as not to "corrupt" the OD db, so in WGM first before going to Directory
Utility set the Home directory to "None". (We need to remember to set this to a correct share
later….Mental Note!!!)
Now Open Directory Utility
Method 1
System Preferences > Users & Groups > Login Options
Click the Lock to make changes…
Authenticate -> click "OK" (do I REALLY have to step-by-step this?)
Network Account Sever: • Local Server - click "Edit" button here.
Open Directory Utility > Directory Editor
( Wow, did Apple hire someone from Microsoft? You'ld think with all their research in to
Human Interface Design that's WAY too many clicks to get to something you need. )
or
Method 2 (It's good to know about this directory, neat-o speed-o app's hidden here.)
Use "Go to Folder" Under Finder > Go > Go to Folder...
⇧⌘G /System/Library/CoreServices/
Click "OK"
and Double click Directory Utility.app
or
Method 3
Terminal
open /System/Library/CoreServices/Directory\ Utility.app/
Now From the Directory Editor Pane you will see a Pop-up menu Labeled "Viewing"
You should glance through this and get to know it. You should use it to see what
information is really being stored about your Users, Groups, Mounts…
We are interested in Mounts, which is where we want to go…and there is the pesky
mount that you will see reflected in WGM.
Authenticate, and delete the bugger.
Quit WGM and restart it. Voila, bad share is GONE!!!!!
a.) First select all my users
b.) Then I clicked on the "+" and added the correct share
( Remember, I only showed you the first one we created, this is another and
for THIS one you HAVE to go into Server.app and verify that it is set to be
available for Home Directories in this case for AFP. )
For the home directory entry you do this...
afp://computer.domain.com/Accounts-afp
%short_name%
/Network/Servers/computer.domain.com/Volumes/Hard\ Drive/Department/Accounts/%short_name%
%short_name% is a wild card for the short name there are other wild cards check out Apple's
Documentation on them. I lost the link sorry \<shrug\>
Interesting dscl commands…(check it out in command line form and compare side by side with
what you see in the GUI Directory Utility)
dscl . list /users
dscl . list /groups
If you want to output information about each user, though, use readall:
dscl . readall /users
dscl . readall /groups
And if you need to programatically parse said information, use -plist to make your life easier:
dscl -plist . readall /users
dscl -plist . readall /groups
This made a little more direct sense to me, language wise…but fyi "." is kind of a wild card I think so the first
commands I think look in ALL directories local, Search, LDAP whatever you have. The command here
corresponds to the Entry from the Pop-up menu "…in node > Blah…" see GUI of Directory Utility to confirm.
dscl /LDAPv3/127.0.0.1 -list /Users
dscl /Local/Default -list /Users
5.) Workgroup Manager
Remember this is a utility that is not long for this world. Apple's Mountain Lion is rumored to fully
replace it, why? Yea, Apple's making a go at MDM (Mobile Device Management) and somehow
desktop computers are being pulled/dragged along for the ride. I have plenty of issues with
Profile Manager, but I'll likely revisit it in a couple of months and see where we stand.
Anyway, treat this baby like the bottom rung, because, well it is built like you start your
foundation here, but it's just a viewer with controlling "tweaks". Use the other areas to get a solid
grasp of what is actually going on. Server.app is where you should create accounts you can
feel are safe. When you create accounts in WGM, you are responsible for making sure they
have the appropriate EVERYTHING.
This list is by no means complete, but these are the areas this noob is or was prepared to talk about.
Good night for now. Enjoy climbing my wall of text, and yea sorry about that. :O Run for you lives!!!!
- Signed Shadowwraith -
Issue with WAN Miniport when setting up VPN server in Windows 7
I tried making my computer a VPN server by setting up a "New incoming connection" under network connections within Network and sharing center. Originally, it did complete but did not show any WAN Miniport connections. I could not connect to this VPN
with my other computer.
What I've done so far:
I "updated" all the WAN Miniports in Device Manager to "MAC Bridge Miniport" driver (since I could not uninstall them as they were) and then proceeded to uninstall all the WAN miniports. I rebooted my computer and then the device
drivers tried to install automatically but only a few installed successfully.
I then downloaded the latest WDK (8.1) and tried re-installing all the WAN Miniports via devcon.exe with the command "devcon.exe install c:\windows\inf\netrasa.inf MS_PptpMiniport". It said that the node was created but it failed to install the
drivers. I rebooted my computer but some of these mini ports appeared as "Unknown" in Device Manager while others appeared with their names but with numbers attached since I've attempted this a few times, Ex: "WAN Miniport (IP) #3".
from my understanding, I need at least WAN Miniport pptp to be working for VPN to work. I don't know what to do at this point. Any help is greatly appreciated. Thanks in advance.
Gateway DX4822-01 Desktop PC
Windows 7 64-bit, SP1Hi,
Please try to use Incoming connection troubleshooter to fix this problem for test. If it identify any problem that couldn't fix this problem, please provide the error message here.
Control Panel\All Control Panel Items\Troubleshooting\All Categories
Roger Lu
TechNet Community Support -
I have 11 computers all pc's linked to an old windows server and all used primarily for microsoft office and printer sharing as well as for internet browsing. Can an apple joining the setup cause compatability issues?
HI,
grey-haired IT guy here, old enough to come from the counter culture. I ran (COO, including IT & compliance) a third billion dollar financial institution all on Macs 15 to 20 years ago. All the "experts" had a long list of reasons it would be impossible, and it drove the examiners nuts, but it's only gotten better.
So your benefits are going to be mostly in ease of administration after the learning curve, less aggravating glitches, better overall reliability, and arguably better security. And reductions in cost and improvement in time to implement changes.
In my current environment of mostly dozens of PCs, the moment I let the OS X Server be the domain master controller, the Windows network browser settled down and instantly showed network neighborhoods like it should have. (We may have some forgotten pre-NT machines plugged in somewhere -- this is NOT a financial institution).
Couple anecdotes might explain the feeling of coming in out of the cold: Putting a test copy of a web site from the cloud onto the Mac server, XAMPP or MAMP is pretty much already there. The site has a couple WordPress blogs, and they need .htaccess files, and Apache needs an option set to permit remapping URLs. After much searching far and wide to find why it didn't seem to be working, I found the checkbox right there on Apple's management screens. Much easier than editing .conf from command line. Linux web admins hate it.
Tale # 2: We aren't fully Windows domain controlled -- just using the old network browser. Need to upgrade that, and I Googled quite a while trying to understand what needed to be done to use Apple's Open Directory instead of setting up an Active Directory on Windows -- both SLDAP3. Turns out one reason I couldn't find much is there isn't much to say: it just works. Just join the domain from a Windows machine.
One more and I'll be quiet a bit. We use the Wiki collaboration which is nice enough as far as it goes (no spreadsheets, fatal flaw) and it occupies the server's native web site slot. So the test copy needed to be another site. Easy enough -- site setup is all GUI and works fine, but WordPress could not handle a multiuser blog coming to a non-standard port (other than 80) so I needed a second IP multihomed on the server. How do you do this? Go to Network in the System Prefs, click on the Ethernet interface and select "duplicate". Set your IP address. Done.
In summary a Mac OS X Server is a better server for a Windows shop than Windows Server 200x.
My bottom line for choosing Apple: lower blood pressure. I SHOULD be money. After all is said and done, it's about money. The incredibly more pleasant experience is a free benefit. You'll pay more for better hardware, but way less in time and trouble. And you won't be hounded on a daily basis to update the system. Not that Adobe or Firefox are any better about it on a Mac, but the Apple approach to updates stays in the background.
Think different. Simplify. Focus. Enjoy your work. -
Can I setup my Time Capule 2TB as a VPN server so I can connect to my network from a remote (out-of-state) location or is there another way?
There is no vpn server in the TC so no you cannot use it that way.
If you want to use vpn .. buy a vpn endpoint modem or modem router or router depending on your broadband. Bridge the TC so it is simply a part of the network and all routing functions are handled by the vpn router.
If the TC is directly facing the internet.. ie you get the public IP on the wan interface.. you can connect by checking the remote access and using a decent password. Security is no where near as good as vpn but for occasional connection is probably OK. You can only use AFP protocol. So this must be done from a Mac computer. Just do a google search.. lots of sites.. lots of threads.
If the TC is not getting public IP then you can port forward AFP to the TC.. that is the only protocol still.. SMB is blocked by all ISP as too dangerous as half the computers in the world would be exposed.
There is a final issue.. you need either a static public ip or dynamic dns service. The TC does not have a dyndns client.. mobileme used to provide that service but is being discontinued. Cloud is now the way.. if you need a dyndns service read how to set this up..
http://dyn.com/support/airport-time-capsule-with-dynamic-dns/
You need a personal domain for this to work.. note also the experimental aspect to it.
IMHO vpn with a vpn router is the way to go. All vpn routers have some dyndns client services. -
Can't connect to Easy VPN Server using Windows 7 inbuilt VPN client
Hi Everyone,
I would like your help to resolve a vpn issue I am having with my Windows 7 inbuilt vpn client. I am trying to connect to an Easy vpn server on a Cisco 2951 ISR G2. Well, I can connect using Cisco vpn client v5.07 but I can't connect using Windows 7 inbuilt vpn client. Is there any configuration that I am missing so that I can connect using Windows 7 inbuilt vpn client to connect to the vpn server?
Thank you.Hi MindaugasKa,
Base on your description, your case must is the NPS client can’t pass the NPS policy.
The NPS client can’t connect the network may have many reason, such as the Network Access Protection Agent service not started successful, the certificate not issued properly,
please offer us information when your Windows 7 client denied, such as event id, original error information, screenshot.
More information:
Extensible Authentication Protocol (EAP) Settings for Network Access
http://technet.microsoft.com/en-us/library/hh945104.aspx
Network Access Protection in NPS
http://msdn.microsoft.com/en-us/library/cc754378.aspx
Appendix A: NAP Requirements
http://technet.microsoft.com/en-us/library/dd125301(v=ws.10).aspx
802.1X Authenticated Wireless Access Overview
http://technet.microsoft.com/en-us/library/hh994700.aspx
Connecting to Wireless Networks with Windows 7
http://technet.microsoft.com/library/ff802404.aspx
The related thread:
NPS 2012 rejects windows 7 clients after upgrade from 2008 R2. Requested EAP methods not available
http://social.technet.microsoft.com/Forums/windowsserver/en-US/44af171f-6155-4f2e-b6c7-f89a2d755908/nps-2012-rejects-windows-7-clients-after-upgrade-from-2008-r2-requested-eap-methods-not-available?forum=winserverNAP
I’m glad to be of help to you!
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place. -
VPN Server broken with Windows after upgrade from Tiger.
Hey there
I use Tiger 10.4 Server on a PowerMac G4.
It has two network interfaces, one public facing with it's own static IP, and the other internal facing.
The VPN service works perfectly, and allows people to connect via L2TP and assignes them an IP on the internal facing subnet, and allows OS X and Windows clients to connect.
However after upgrading to Leopard, only Mac clients can connect, all the Windows clients connect, and although they get an IP and are able to ping destinations, attempts to connect to these destinations (some of which are web apps on port 80, others are file servers running Samba), they just sit waiting for ever.
I've experimented with this problem, and it appears to be a problem with MTU and packet fragmentation, however these settings appear to be the same between Tiger, which worked, and Leopard which does not work.
Does anyone have any experience with the new VPN Server in Leopard, and can offer me any advice on how to fix this problem? I'm currently downgraded to Tiger again until a fix can be found.I had the same issue, among others, but I finally got everything to work eventually. It seems that if the IP range of the client connecting to VPN is in the same range of the server LAN, there will be connectivity issues, whether it be pcs and/or macs not being able to connect. The following set up got my VPN services working:
1. Get DNS and Open Directory working properly. When I did an upgrade, the Server Admin updated my zone files with a curious extra space, which killed DNS. For example, I had the name server as ns.company.private., but in the files it would say ns. company.private everywhere! I've been reading about various bugs in upgrading DNS, so I think it's best just to start DNS from scratch. But if you are upgrading, the following thread expalins how to go about setting up DNS and Open Directory: http://discussions.apple.com/thread.jspa?messageID=5957209�
2. Once you have Open directory users and dns working properly, then set up VPN. Give a unique IP range to the internal network (192.168.7.1/24) that other networks will not emulate. If you use 192.168.1.1, you will likely run into issues. You can always test this method out by changing the IP range from a remote location and trying to get in this way instead of changing the server. Also, be aware that if you use Gateway Assistant within NAT, it will automatically give you a 192.168.1.1/24 range, at least that's been my experience, and this always killed VPN for me. I would set up NAT manually to avoid problems.
3. Ensure that the DNS information under the Client Information tab is correct. For my server I have 192.168.9.1 as the nameserver, and company.private as the search domain. Then set up routing tables. Mine are 192.168.0.0:255.255.0.0 private and 0.0.0.0:0.0.0.0 public.
Also, when you restart the server, stop and restart VPN services, as there is some talk about the Tiger bug still being around, where VPN services are messed up upon startup. This all worked for me and a couple others that had similar server set ups. Hopefully this will work for you. -
Hi!,
how do I connect the RV042 with an Windows VPN Server,
so that the PC's behind the RV042 get the external IP of the VPN and join the VPN-Server's Network.
I did configure the Windows Server with this tutorial:
http://blog.lan-tech.ca/2012/01/28/sbs-2011-essentials-configuring-vpn-access/
I can connect from any device just fine, so the server is running properly. I just need to know how to connect the RV042 to this VPN.
Kind Regards
penpenpenDear Customer,
Thank you for reaching the Small Business Support Community.
Please refer to the below document, I think it is what you are looking for;
http://sbkb.cisco.com/CiscoSB/Loginr.aspx?login=1&pid=2&app=search&vw=1&articleid=2957
Please do not hesitate to reach me back if there is any further assistance I may help you with.
Kind regards,
Jeffrey Rodriguez S. .:|:.:|:.
Cisco Customer Support Engineer
*Please rate the Post so other will know when an answer has been found. -
Adding Lion Server as VPN server to an existing network
So here is my story.
I have a network that uses a local IP range of 172.25.0.x and outside range of 80.242.156.x.
My MacMini Lion Server has a 80.242.156.x IP and a 172.25.0.x Virtual IP on the same NIC.
What i am trying to do is to get VPN Server to work when connecting directly to 80.242.156.x address, but that doesn't seem to work.
Now, what i have been reading on every single forum is that people have a AEBS (Airport Exteme Base Station) and the Macmini Lion Server connected to it.
My situation is that i have the Lion Server connected directly in a switch in the datacenter, do i really need an AEBS to get VPN to work?
Because whatever i do, when i try to connect using my iPhone, iPad or even Mac Pro, it doesn't even respond to my connection attempt, so something is not coming through.
Anyone with suggestions or have had a similar or even the same problem and know a possible solution?
Cheers,
AnwarWell, i don't have anything that could block it, i have it plain on the internet without firewall, i did that on purpose to see if there was anything blocking indeed, but still in this setup nothing...
i have no problem whatsoever on other servers in the rack which are all Linux based servers, except for this MacMini which is giving me a real hardtime figuring out what the problem could be.
I have checked everything i could, even the settings in terminal with serveradmin.
I would actually think something in OSX is blocking the connection, but then again... that would be weird cause i don't have anything special installed that could do it, its practically empty (fresh installed) and the OSX firewall is disabled...
(It's not a residential-class connection, the server is not at home, it's in a datacenter where nothing is blocked by default.) -
How to setup built-in VPN server on Mountain Lion
Anyone have information on configuring the built-in VPN server in OS X Mountain Lion ?
Update - it works ! At least I can connect to Mountain Lion (not server) from my iPhone using the VPN Server Configurator app.
Here's what I did :
1) download the app and install
2) setup using the help files on the web page : http://www.greenworldsoft.com/product-vpn-server-help.html
3) at the last stage you need to setup port forwardin on your router
4) under Airport Utility 6.0 you cannot setup ports 500 or 4500 due to BTTM conflicts but setup the other 2 ports (1723 TCP and 1701 UDP), update airport extreme
5) download Airport Utility 5.6 from here : download already extracted utility it is in it's extracted form as is necessary under Mtn Lion (thanks to NetUse Monitor for the download - great app by the way)
6) run 5.6 and setup port forwarding (Advanced-Port Mapping) for the other 2 ports (500 and 4500 UDP), update airport extreme
7) that's it, I was able to connect to the VPN from my iPhone ! -
When I try to set up Icloud control panel in Windows Vista, I get "your setup couldn't be started because the Icloud server stopped responding. I've tried loads of fixes suggested on the net but none worked. Can anyone help me please?
Hello, ksb2.
Thank you for visiting Apple Support Communities.
We are investigating this issue. This article will be updated as more information becomes available.
iCloud: iCloud Control Panel setup cannot be started
http://support.apple.com/kb/TS5178
Cheers,
Jason H. -
How setup SPA525 vpn client?How configuration Cisco VPN server?
Hi all,
How setup SPA525 vpn?
How configuration Cisco VPN server for SPA525?
Regards
JohnHi John,
Do you want to setup the SPA525 on the UC300? If so the UC300 does not support any VPN or remote users. If you need configuration help with the UC5XX just let me know.
Thank you,
Jason Nickle
Maybe you are looking for
-
How to set two different welcome-file to different servlets in web.xml
Hi friends, Can some one help with web.xml file I have to different servlets in applications. I want to set two different welcome files for my two different servlets in web.xml Please, can some one give me sample code to achieve this. Here web.xml co
-
Classpath settings of java for fedora5.0
Hello All, I've just switched from windows to fedora5.0(linux), and have no knowledge how and from where i've to set classpath for java. Java comes inbuild with this OS, but what version it is?????any help either the full procedure or some helpful li
-
In a detail table, i want to number my lines in creation order (first line created is number 1, next number 2, ...). I could use a sequence but : 1. For each new master record, I need to restart counting from 1 2. I don't want hole in my numbers. If
-
How to find hardware details of IPVC-3515-MCU12
Please help me with how to find hardware details of IPVC-3515-MCU12 & also for Cisco Unified MeetingPlace Express
-
getting not connected to internat message when i back page or fill out forms