WRV200 dropping VPN/PPTP connections
I replaced an aging router with a WRV200 on recommendation from two sources. Everything is working nicely except inbound PPTP connections on port 1723. TCP1723 is forwarded to the correct IP address internally. Everything is wired with wireless disabled. When a client connects, they get dropped after about 3 or 4 minutes. Clients are also unable to connect if their local Windows Firewall (XP Pro SP2) is enabled. Our previous router didn't have this problem, and if I swap the routers again, the problem goes away. This is with the latest firmware. Please help, my remote users are panicking!
Disable all other firewalls ..... reset the router & reconfigure it ...
See if still it shows the same error ...
Similar Messages
-
Tiger VPN (PPTP) connection issues
Hello everyone.
I'm having major issues trying to connect to office VPN from home; hoping someone can point me in the right direction. (And my profound apologies in advance for the long post -- just trying make sure to include enough detail to debug whatever might be happening)
At the office we have a 3Com OfficeConnect VPN Firewall sitting in front of a Microsoft 2003 Exchange server. (3Com product page for this VPN box is http://www.3com.com/products/en_US/detail.jsp?tab=features&sku=3CR870-95&pathtyp e=purchase). Home connection is a Linksys WRT54GL wireless router in front of a broadband cable modem. PPTP pass-through is enabled in the router config.
At home I have a WinXP-SP2 laptop and my G4 Powerbook (OS 10.4.7) sitting side-by-side. From the XP laptop, I can get into the VPN using XP's built-in client without any problems. The DNS lookup and authentication steps take about 2-3 seconds combined. Once the connection is established, both external sites (cnn.com) and internal sites (intranet.companyname.local) load in a browser window without any appreciable delay. I can also access Windows shared drives on the internal network without problems, including large (10's of MB or more) file copies to/from the XP laptop's HD.
On the Powerbook, using Tiger's built-in VPN client, I can connect OK (though the authentication step takes a bit longer, about 4-5 seconds), but after that, almost nothing works. I can ping the internal DNS server, but after a few pings with reasonable delays (~15 millisecond range), the round-trip times suddenly jump to handfuls of seconds. In the browser, trying to load an internal webpage (http://intranet.companyname.local) times out before anything shows up on screen. In Finder, using Go>Connect to Server... very slowly establishes the connection (~10-15 seconds or longer), and sometimes opens a Finder window... but then invariably times out. I have never once had the connection remain stable enough to transfer so much as a single file from the shared volume onto the Powerbook's Desktop before it times out and disconnects.
On the XP machine, relevant(?) VPN config settings are:
require secured password
require data encryption (disconnect if none)
PPTP VPN
LCP extensions enabled
software compression enabled
multi-link negotiation for single link connections DISABLED
server type = PPP
transports = TCP/IP
authentication = MS CHAP
encryption = MPPE 128
compression = none
PPP multilink framing = off
and, once the VPN connection is established, parameters are (from "ipcofig /all"):
Windows IP Configuration
Host Name . . . . . . . . . . . . : (companyname)-hj2
Primary Dns Suffix . . . . . . . : (companyname).local
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : (companyname).local
Ethernet adapter Wireless Network Connection:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R) PRO/Wireless 2915ABG Network Connection
Physical Address. . . . . . . . . : XX-XX-XX-XX-XX-XX
Dhcp Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 192.168.1.104
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1
DHCP Server . . . . . . . . . . . : 192.168.1.1
DNS Servers . . . . . . . . . . . : 192.168.1.1
PPP adapter (ConnectionName):
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : WAN (PPP/SLIP) Interface
Physical Address. . . . . . . . . : XX-XX-XX-XX-XX-XX
Dhcp Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 172.16.0.70
Subnet Mask . . . . . . . . . . . : 255.255.255.255
Default Gateway . . . . . . . . . : 172.16.0.70
DNS Servers . . . . . . . . . . . : 172.16.0.11
finally, results of "ping -n 10 (InternalServer)":
Pinging (InternalServer).(companyname).local [172.16.0.5] with 32 bytes of data:
Reply from 172.16.0.5: bytes=32 time=4ms TTL=128
Reply from 172.16.0.5: bytes=32 time=10ms TTL=128
Reply from 172.16.0.5: bytes=32 time=10ms TTL=128
Ping statistics for 172.16.0.5:
Packets: Sent = 10, Received = 10, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 4ms, Maximum = 10ms, Average = 9ms
On the Powerbook, I have a VPN (PPTP) connection set up with "Send all traffic over VPN connection" unchecked. In the Network panel of System Preferences, I have tried manually adding (and removing) "local, (companyname).local" in the Search Domains line, and manually adding (and removing) the IPs of our internal DNS servers (172.16.0.5, 172.16.0.11) under the TCP/IP tab. Proxies are turned off in all cases.
With those settings, the relevant(?) parts of running "ifconfig" from a Terminal window after starting the VPN are as follows:
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384
inet6 ::1 prefixlen 128
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x1
inet 127.0.0.1 netmask 0xff000000
en1: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
inet6 fe80::XXX:XXXX:XXXX:XXXX%en1 prefixlen 64 scopeid 0x5
inet 192.168.1.100 netmask 0xffffff00 broadcast 192.168.1.255
ether XX:XX:XX:XX:XX:XX
media: autoselect status: active
supported media: autoselect
fw0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 4078
lladdr XX:XX:XX:XX:XX:XX:XX:XX
media: autoselect <full-duplex> status: inactive
supported media: autoselect <full-duplex>
ppp0: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 1444
inet 172.16.0.69 --> 172.16.0.11 netmask 0xffff0000
The associated connection log from Internet Connect is:
Tue Jul 18 08:50:57 2006 : PPTP connecting to server 'vpn.(companyname).com' (XXX.XXX.XXX.XXX)...
Tue Jul 18 08:50:57 2006 : PPTP connection established.
Tue Jul 18 08:50:58 2006 : using link 0
Tue Jul 18 08:50:58 2006 : Using interface ppp0
Tue Jul 18 08:50:58 2006 : Connect: ppp0 <--> socket[34:17]
Tue Jul 18 08:50:58 2006 : sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0xb851f701> <pcomp> <accomp>]
Tue Jul 18 08:50:58 2006 : rcvd [LCP ConfReq id=0x1 <mru 1492> <auth chap MS> <magic 0x80697000>]
Tue Jul 18 08:50:58 2006 : lcp_reqci: returning CONFACK.
Tue Jul 18 08:50:58 2006 : sent [LCP ConfAck id=0x1 <mru 1492> <auth chap MS> <magic 0x80697000>]
Tue Jul 18 08:50:58 2006 : rcvd [LCP ConfRej id=0x1 <asyncmap 0x0> <pcomp> <accomp>]
Tue Jul 18 08:50:58 2006 : sent [LCP ConfReq id=0x2 <magic 0xb851f701>]
Tue Jul 18 08:50:58 2006 : rcvd [LCP ConfAck id=0x2 <magic 0xb851f701>]
Tue Jul 18 08:50:58 2006 : sent [LCP EchoReq id=0x0 magic=0xb851f701]
Tue Jul 18 08:50:58 2006 : rcvd [CHAP Challenge id=0x1 <4f0656add65818c2>, name = "Guest"]
Tue Jul 18 08:50:58 2006 : sent [CHAP Response id=0x1 <0000000000000000000000000000000000000000000000004c86e5ccf08b95431034ef14706021 d358dc21b96a59157301>, name = "(UserName)"]
Tue Jul 18 08:50:58 2006 : rcvd [LCP EchoRep id=0x0 magic=0x80697000]
Tue Jul 18 08:50:58 2006 : rcvd [CHAP Success id=0x1 "Authentication succeeded, welcome!"]
Tue Jul 18 08:50:58 2006 : CHAP authentication succeeded: Authentication succeeded, welcome!
Tue Jul 18 08:50:58 2006 : Disabling 40-bit MPPE; MS-CHAP LM not supported
Tue Jul 18 08:50:58 2006 : sent [CCP ConfReq id=0x1 <mppe +H -M +S -L -D -C>]
Tue Jul 18 08:50:58 2006 : rcvd [IPCP ConfReq id=0x1 <addr 172.16.0.11> <ms-dns3 0.0.0.0> <ms-wins 0.0.0.0>]
Tue Jul 18 08:50:58 2006 : sent [IPCP TermAck id=0x1]
Tue Jul 18 08:50:58 2006 : rcvd [CCP ConfReq id=0x1 <mppe +H +M +S +L -D -C>]
Tue Jul 18 08:50:58 2006 : sent [CCP ConfNak id=0x1 <mppe +H -M +S -L -D -C>]
Tue Jul 18 08:50:58 2006 : rcvd [CCP ConfAck id=0x1 <mppe +H -M +S -L -D -C>]
Tue Jul 18 08:50:58 2006 : rcvd [CCP ConfReq id=0x2 <mppe +H -M +S -L -D -C>]
Tue Jul 18 08:50:58 2006 : sent [CCP ConfAck id=0x2 <mppe +H -M +S -L -D -C>]
Tue Jul 18 08:50:58 2006 : MPPE 128-bit stateless compression enabled
Tue Jul 18 08:50:58 2006 : sent [IPCP ConfReq id=0x1 <addr 0.0.0.0> <ms-dns1 0.0.0.0> <ms-dns3 0.0.0.0>]
Tue Jul 18 08:50:58 2006 : sent [IPV6CP ConfReq id=0x1 <addr fe80::020a:95ff:fea5:564c>]
Tue Jul 18 08:50:58 2006 : sent [ACSCP] 01 01 00 10 01 06 00 00 00 01 02 06 00 00 00 01
Tue Jul 18 08:50:58 2006 : rcvd [LCP ProtRej id=0x1 80 57 01 01 00 0e 01 0a 02 0a 95 ff fe a5 56 4c]
Tue Jul 18 08:50:58 2006 : rcvd [LCP ProtRej id=0x2 82 35 01 01 00 10 01 06 00 00 00 01 02 06 00 00 00 01]
Tue Jul 18 08:50:58 2006 : rcvd [IPCP ConfRej id=0x1 <ms-dns3 0.0.0.0>]
Tue Jul 18 08:50:58 2006 : sent [IPCP ConfReq id=0x2 <addr 0.0.0.0> <ms-dns1 0.0.0.0>]
Tue Jul 18 08:50:58 2006 : rcvd [IPCP ConfNak id=0x2 <addr 172.16.0.69> <ms-dns1 172.16.0.11>]
Tue Jul 18 08:50:58 2006 : sent [IPCP ConfReq id=0x3 <addr 172.16.0.69> <ms-dns1 172.16.0.11>]
Tue Jul 18 08:50:58 2006 : rcvd [IPCP ConfAck id=0x3 <addr 172.16.0.69> <ms-dns1 172.16.0.11>]
Tue Jul 18 08:51:01 2006 : sent [IPCP ConfReq id=0x3 <addr 172.16.0.69> <ms-dns1 172.16.0.11>]
Tue Jul 18 08:51:01 2006 : rcvd [IPCP ConfAck id=0x3 <addr 172.16.0.69> <ms-dns1 172.16.0.11>]
Tue Jul 18 08:51:04 2006 : sent [IPCP ConfReq id=0x3 <addr 172.16.0.69> <ms-dns1 172.16.0.11>]
Tue Jul 18 08:51:04 2006 : rcvd [IPCP ConfAck id=0x3 <addr 172.16.0.69> <ms-dns1 172.16.0.11>]
Tue Jul 18 08:51:07 2006 : sent [IPCP ConfReq id=0x3 <addr 172.16.0.69> <ms-dns1 172.16.0.11>]
Tue Jul 18 08:51:07 2006 : rcvd [IPCP ConfAck id=0x3 <addr 172.16.0.69> <ms-dns1 172.16.0.11>]
Tue Jul 18 08:51:08 2006 : rcvd [IPCP ConfReq id=0x1 <addr 172.16.0.11> <ms-dns3 0.0.0.0> <ms-wins 0.0.0.0>]
Tue Jul 18 08:51:08 2006 : ipcp: returning Configure-REJ
Tue Jul 18 08:51:08 2006 : sent [IPCP ConfRej id=0x1 <ms-dns3 0.0.0.0> <ms-wins 0.0.0.0>]
Tue Jul 18 08:51:08 2006 : rcvd [IPCP ConfReq id=0x2 <addr 172.16.0.11>]
Tue Jul 18 08:51:08 2006 : ipcp: returning Configure-ACK
Tue Jul 18 08:51:08 2006 : sent [IPCP ConfAck id=0x2 <addr 172.16.0.11>]
Tue Jul 18 08:51:08 2006 : ipcp: up
Tue Jul 18 08:51:08 2006 : local IP address 172.16.0.69
Tue Jul 18 08:51:08 2006 : remote IP address 172.16.0.11
Tue Jul 18 08:51:08 2006 : primary DNS address 172.16.0.11
The problem is that despite this apparently successful negotiation, the VPN connection doesn't really work. If I type "intranet" into the browser URL bar, it doesn't pick it up as "intranet.companyname.local" and instead treats this as a search query, which it passes to google... which times out. If I type "intranet.companyname.local" into the URL bar instead, it appears to do the DNS lookup correctly... but then times out again.
Ping times look like this at first:
PING (InternalServer).(companyname).local (172.16.0.5): 56 data bytes
64 bytes from 172.16.0.5: icmp_seq=0 ttl=128 time=16.605 ms
64 bytes from 172.16.0.5: icmp_seq=1 ttl=128 time=15.920 ms
64 bytes from 172.16.0.5: icmp_seq=2 ttl=128 time=16.154 ms
^C
--- (InternalServer).(companyname).local ping statistics ---
3 packets transmitted, 3 packets received, 0% packet loss
round-trip min/avg/max/stddev = 15.920/16.226/16.605/0.284 ms
... but then if I try it again two seconds later:
PING (InternalServer).(companyname).local (172.16.0.5): 56 data bytes
64 bytes from 172.16.0.5: icmp_seq=0 ttl=128 time=727.144 ms
64 bytes from 172.16.0.5: icmp_seq=1 ttl=128 time=1727.030 ms
64 bytes from 172.16.0.5: icmp_seq=2 ttl=128 time=2727.260 ms
64 bytes from 172.16.0.5: icmp_seq=3 ttl=128 time=3726.747 ms
64 bytes from 172.16.0.5: icmp_seq=4 ttl=128 time=5723.986 ms
64 bytes from 172.16.0.5: icmp_seq=5 ttl=128 time=5719.810 ms
64 bytes from 172.16.0.5: icmp_seq=6 ttl=128 time=6720.334 ms
64 bytes from 172.16.0.5: icmp_seq=7 ttl=128 time=6719.848 ms
^C
--- (InternalServer).(companyname).local ping statistics ---
15 packets transmitted, 8 packets received, 46% packet loss
round-trip min/avg/max/stddev = 727.144/4224.020/6720.334/2176.543 ms
OK, enough for now. Can anyone spot what I might be doing wrong, and/or suggest something to try to remedy this? If there is any additional logging/debug info that would be useful, please ask and I will track it down.
Thanks very much in advance!!! /HJProblem not entirely solved, but mostly working now. It turns out the issue was with the 3Com OfficeConnect VPN box. It was causing all sorts of headaches and had to be manually power cycled at least once a week, so we ditched it and got a Linux-based Firewall/VPN appliance (http://www.ingate.com/ingate_vpn.php).
Now I can connect and mount Windows drives via SMB (both the command line and the Finder's "Connect to Server" approach seem to work). Performance still exhibits annoying lags at random times, and occasionally the VPN connection disconnects for no good reason, but at least I can get at my files from home. The other issues -- such as being able to resolve "xxx.yyy.local" addresses in the browser by making sure I hit the internal DNS server before any external ones -- all seem to be network configuration issues on my end.
In short, my guess is that the 3Com box was causing issues with some low-level timing parameters or other related settings in how the VPN connection was being established. I was just starting to teach myself about ARP tables, NTLMv2 authentication, and the like when we replaced it with the new firewall.
Hope this helps.
/Heywood -
VPN PPTP Connects but doesn't work
Hello,
I'm new in mac...but last week when Im connected to my work by pptp VPN, i could not access to the resources of this network (servers, pc, etc.)...but few weeks ago I can do it as ussual. I didnt install anythink and if I send all packets to the vpn works, but i can't get internet..
I think some route preference change automatically but i don't how to fix it. any helps?
thanks in advance.
Regards,
Dario.OK - this is how you can fix the problem.
make a backup copy of your network id pref list, perhaps using the command line as below from a terminal window.
cp /Library/Preferences/SystemConfiguration/com.apple.network.idenfication.plist /Library/Preferences/SystemConfiguration/com.apple.network.idenfication.plist.o ld
open Library/Preferences/SystemConfiguration/com.apple.network.idenfication.plist using a TEXT editor or something similar.
Open the network settings screen where your VPN is listed (under System Preferences) and make a note of your VPN settings. Then delete the VPN using the "-" button and click Apply.
In the com.apple.network.idenfication.plist you will see the the defintion for the VPN settings a little like thus:
<dict>
<key>Signatures</key>
<array>
<dict>
<key>Identifier</key>
<string>VPN.RemoteAddress=myvpn.domain.com</string>
<key>Services</key>
then lots of settings info, and ending with the definition of a new service
</array>
<key>Signature</key>
<string>VPN.RemoteAddress=myvpn.domain.com</string>
<key>Timestamp</key>
<date>2009-09-01T06:42:53Z</date>
</dict>
<dict>
<key>Identifier</key>
Delete everything and including between the <dict> and </dict> for this Identifier and this will remove the VPN settings and leave all the others intact.
Save the file.
Now go back to your network settings screen and re add the you VPN and it will work once again as it did before. -
Slow VPN PPTP Transfer Speeds vs. Windows XP
I recently switched my father to a new unibody MacBook after years of Windows XP heartache. He uses a VPN (PPTP) connection to access files on the Windows 2003 server at work.
*On the Mac (10.5.5), the file transfer speed over VPN is so slow that it is unusable.* Leopard can connect to the SMB server easily enough but clicking on a volume shows nothing until, after a 2-3 minute wait, the file list finally populates. The old Windows XP machine loads the volumes far quicker and is noticeably faster.
We are using the same credentials and settings as on the old machine, but nothing we do will speed up the connection so that it is actually usable.
Any thoughts or suggestions? At this stage I am extremely disappointed in the Mac's ability to integrate with enterprise. I was so sure the transition would be seamless but Leopard is making basic tasks much more difficult. It's egg on my face!
Help would be much appreciated!
Thanks, jd.
P.S. My apologies if this has already been discussed. Searching didn't give me many relevant results...Hi Joe,
College networks can have a lot of unusual security monitoring systems in place, so it's conceivable that they limit non-PC speed, but as you said, you've checked that.
There is a known issue with some Gigabit Ethernet capable Macintosh systems and some switches. This problem can be fixed by software configuration, so it's possible Windows automatically does it, but MacOS doesn't. Have a look at the instructions specified in this Apple article and see if it helps: http://docs.info.apple.com/article.html?artnum=303660 -
VPN (PPTP) Authentication Failed
Hi,
I am trying to Connect to my work network. Work uses a Secure Computing SG560.
The setup at work on the SG560 is as follows:
PPTP VPN Server
Authentication Scheme: Weakly Encrypted Authentication (CHAP)
Encryption: Strong Encryption (MPPE 128 Bit)
On my mac, I have setup a new VPN (PPTP) Connection
Given it the Internet Address
My Account Name
Encryption Auto (And tried Maximum)
Authentication Settings is password with my password set on the SG560.
Pressing Connection I get a prompt saying Authentication failed
In my console I have this (obviously some settings omitted)
6/12/10 06/12/10 - 9:06:48 PM pppd[1825] pppd 2.4.2 (Apple version 412.3) started by wt9bind, uid 501
6/12/10 06/12/10 - 9:06:48 PM pppd[1825] PPTP connecting to server 'x.x.x.x' (x.x.x.x)...
6/12/10 06/12/10 - 9:06:48 PM pppd[1825] PPTP connection established.
6/12/10 06/12/10 - 9:06:48 PM pppd[1825] Connect: ppp0 <--> socket[34:17]
6/12/10 06/12/10 - 9:06:48 PM pppd[1825] MS-CHAP authentication failed:
6/12/10 06/12/10 - 9:06:48 PM pppd[1825] Connection terminated.
6/12/10 06/12/10 - 9:06:48 PM pppd[1825] PPTP disconnecting...
6/12/10 06/12/10 - 9:06:48 PM pppd[1825] PPTP disconnected
The only way to get this working is to change the Authentication Scheme in the SG560 to No Auth
If I do this, it connects perfectly with the following:
6/12/10 06/12/10 - 9:09:15 PM kernel utunctlconnect: creating interface utun0
6/12/10 06/12/10 - 9:09:16 PM pppd[1839] pppd 2.4.2 (Apple version 412.3) started by wt9bind, uid 501
6/12/10 06/12/10 - 9:09:16 PM pppd[1839] PPTP connecting to server 'x.x.x.x' (x.x.x.x)...
6/12/10 06/12/10 - 9:09:16 PM pppd[1839] PPTP connection established.
6/12/10 06/12/10 - 9:09:16 PM pppd[1839] Connect: ppp0 <--> socket[34:17]
6/12/10 06/12/10 - 9:09:17 PM pppd[1839] local IP address x.x.x.x
6/12/10 06/12/10 - 9:09:17 PM pppd[1839] remote IP address x.x.x.x
6/12/10 06/12/10 - 9:09:17 PM pppd[1839] primary DNS address x.x.x.x
6/12/10 06/12/10 - 9:09:17 PM pppd[1839] secondary DNS address x.x.x.x
6/12/10 06/12/10 - 9:09:17 PM configd[14] network configuration changed.
6/12/10 06/12/10 - 9:09:17 PM pppd[1839] pptpwaitinput: Address added. previous interface setting (name: en0, address: 192.168.1.9), current interface setting (name: ppp0, family: PPP, address: x.x.x.x, subnet: 255.255.0.0, destination: x.x.x.x).
6/12/10 06/12/10 - 9:09:17 PM configd[14] network configuration changed.
6/12/10 06/12/10 - 9:09:17 PM vmnet-bridge[234] Dynamic store changed
6/12/10 06/12/10 - 9:09:17 PM vmnet-bridge[234] Could not retrieve media for interface ppp0: Operation not supported on socket.
6/12/10 06/12/10 - 9:09:17 PM kernel vmnet: VMNetDisconnect called for port 0xf8f9f00
6/12/10 06/12/10 - 9:09:17 PM kernel vmnet: Invalidating peer info for hub: 0, port: 0
6/12/10 06/12/10 - 9:09:17 PM kernel vmnet: bridge-en0: filter detached
6/12/10 06/12/10 - 9:09:17 PM kernel vmnet: bridge-en0: down
6/12/10 06/12/10 - 9:09:17 PM kernel vmnet: bridge-en0: detached
6/12/10 06/12/10 - 9:09:17 PM kernel vmnet: Freeing hub at 0xe45a000.
Now obviously running no auth is totally unacceptable.
The options in the SG560 for Authentication Scheme is:
PAP
CHAP
MS-CHAP
MS-CHAPV2
Required Encryption:
No Encryption
Basic Encryption MPPE 40Bit
Strong Encryption MPPE 128Bit
Can somebody tell me why my client on my mac will not connect as soon as the encryption level is changed on the SG560? It works perfectly from Windows.
ThanksCan anybody help me on this?
-
AirPort Extreme Crash during PPTP connect using VPN on demand
I can reproduce this crash consistently every time.
My AEBSn is running 7.4.2. My MBP is running 10.6.2.
I set up a PPTP connection, tick "send all traffic over VPN connection" in the advanced options.
I add a domain to the "VPN on Demand" list and apply changes.
I click connect, and the AEBS light immediately goes amber. A few seconds later, it's back to green and everything is groovy...unless I try to connect again.
The problem is solved by simply removing the domain from "VPN on Demand."
Here's the relevant snippet from ppp.log:
Sat Jan 30 00:22:36 2010 : PPTP connecting to server 'xxxx.xxxx.xxx' (xx.xxx.xx.xx)...
Sat Jan 30 00:22:37 2010 : PPTP connection established.
Sat Jan 30 00:22:37 2010 : Using interface ppp0
Sat Jan 30 00:22:37 2010 : Connect: ppp0 <--> socket[34:17]
Sat Jan 30 00:22:40 2010 : pptpwaitinput: Address deleted. previous interface setting (name: en0, address: 10.0.1.14), deleted interface setting (name: en0, family: Ether, address: 10.0.1.14, subnet: 255.0.0.0, destination: 10.0.1.255).
Sat Jan 30 00:22:40 2010 : linked service found: Setup:/Network/Service/C1126C24-140A-4AE4-A35D-553148185E2F/Interface
Sat Jan 30 00:22:40 2010 : starting wait-interface timer for pptp: 20 secs
Sat Jan 30 00:22:51 2010 : pptpwaitinput: Address deleted. previous interface setting (name: en0, address: 10.0.1.14), deleted interface setting (name: en1, family: Ether, address: 10.0.1.5, subnet: 255.0.0.0, destination: 10.0.1.255).
Sat Jan 30 00:23:00 2010 : pptpwait_interfacetimeout: 20 secs TIMEOUT waiting for interface to be reconfigured. previous setting (name: en0, address: 10.0.1.14).
Sat Jan 30 00:23:00 2010 : PPTP has detected change in the network and lost connection with the server.
Sat Jan 30 00:23:00 2010 : Connection terminated.
Sat Jan 30 00:23:00 2010 : PPTP disconnecting...
Sat Jan 30 00:23:00 2010 : PPTP disconnected
Funny, huh?Hi
I have had this problem with my Airport Extreme since day 1 and it is extremely irritating. Using Windows Vista, Windows 7, Windows Server 2008 and Windows Server 2003 I can crash the router any time I like (or more to the point, really really dislike) by simply initiating a PPTP VPN from any client (wired or wireless) behind the Airport Extreme. The device flashes orange, drops everyone's internet connection and then about a minute later, comes back up again.
Whenever I have to connect to another site using VPN, I need to use NextG internet connection instead of my home cable connection. Any help with this would be gold because other than this really annoying problem (oh and the 'must reboot everytime you make a minor modification to configuration' requirement) I find it a great rock solid wireless access point. -
EA3500 drops VPN connections via wireless
I don't have problems with the computer on other wireless connections with using VPN, so its not the laptop. If I am connecting just to the internet and not trying to connect to the VPN i don't have any issues. If I connect a CAT5 cable directly to the laptop I don't have any issues. If I try to connect via the wireless the VPN will connect and then drop, usually every 30 to 60 seconds. I have looked at the settings and can't see any that would make a difference. Any suggestions on what might be happening and what I need to change on the settings?
thanksMaybe the wireless connection is not enough to handle wireless VPN connection. Try adjusting the wireless settings to improve the signal. Change the wireless channel under the 2.4 GHz to 6, 9, 11, and 1. And use 161 or 157 for the 5 GHz band.
-
WRV200 DDNS-Update fails at PPTP Connection
Hello!
I'm using the WRV200 Router (1.0.39) with an ADSL-Modem (Thomson) to connect to an Austrian ISP. So i have to use the PPTP-Connection to "dial in".
When i'm using this setting DDNS-Update via dyndns.org fails. The Status always says "diasabled". (The Account-Settings are checked)
A second WRV200 at another location uses a solid WAN-IP. This Router doesn't have any Problems with DDNS.
How can i solve this Problem?
Can you explain me the difference between normal and ETSI-Firmware?
Best regards
MosquitoHello Mr. Mosquito; the best advise that I can give you at this time is to follow this steps then retry to establish your connection,
-- factory default your router
--Down and uplaod the latest firmware into you router
--Manually reconfigure your router-----( DO NOT UPLOAD THE OLD CONFIGURATION)
-- Do a port forwarding with the server's LAN ip address under the port forwading tab in your router
Note:don't forget to create your account in your server before establishing any PPTP connection. If this does not work please contact us at 1866-606-1866 US/Canada. -
MiFi 4620LE dropping VPN Connection
I am currently having problems with our 4620LE Jetpacks which are deployed in the field. After a few minutes of connection to our VPN the connection is dropped when using the 4620LE. The VPN connection was tested on a wifi without having any drops. Could this be due to the dormant status of the Mifi? If so can the dormant feature be turned off?
VPN disconnections are common while connected to a MiFi. VPN's by nature are picky on small drops that normally do not effect browsers or applications. This is designed to stop external threats from tampering with your connection but end up being a real pain in the field for daily use. I'd suggest looking into an Auto-Reconnect feature on your VPN's if you have one available to try and improve the user experience.
Try going through the usual reset steps (power cycle, pull the SIM, reset button under the back door) to see if the problem is temporary or not. If the problem persists try traveling to a different area to determine if it is location based or isolated to the MiFi hardware.
Comparing WiFi to the MiFi is not really apples to apples. The MiFi broadcasts its own WiFi signal as would any other wireless router. Chances are your disconnections are not in the WiFi area, but instead are related to your MiFi's connection to Verizon. I have seen many instances where a machine is freshly connected and starts to pull numerous updates that overwelm the connection and break the VPN tunnel. The only work around is to try and connect somewhere else temporarily until the updates are done and then migrate back to the MiFi.
Dormancy is not a feature that you can manipulate, it is a status indicator for your connection. All cellular devices go in and out of dormancy through out the day. As soon as your MiFi sends data across or recieves data from the network it will update its dormancy status accordingly. -
I have what I believe to be a unique need;
I have a MacPro (1,1) running Lion with Server app.
I require that this particular machine be connected as a client to a VPN server, while at the same time acting as a VPN server for my network.
The PPTP connection configuration is such that "Send all traffic over VPN connection" is checked.
If PPTP client is NOT connected, I can connect to Lion as VPN server. As soon as I make the connection from Lion as a client, I can no longer
connect to Lion VPN server.
I understand this is because I am forcing all traffic out the virtual interface (tun0) and eth0 is no longer listening on the local network.
1. Is it possible to bind the VPN client (on Lion Server) to a particular interface? If I could tell the PPTP client to only use eth1 as the interface of choice, my assumption would be that eth0 would then be free to accept incoming connections.
2. Is it possible to bind the VPN service (on Lion Server) to a particular interface? if I could tell the vpn serviec to only listen on eth1, and in turn tell the PPTP client to NOT communicate on eth1 but only eth0 then perhaps I could separate the communications?
In my head, it seems as though both of the above options would be required in order to use Lion as both a VPN server and VPN client
Any and all help appreciated.This is a standard facet of most VPNs - the problem lies in your NAT router since both clients appear to come from the same IP address as far as the VPN server is concerned, and the router can't separate out the traffic.
There are a couple of solutions.
First, the built-in VPN server supports L2TP and PPTP protocols. You should be able to connect one system under each protocol, so that gets your two machines connected.
Second, you can replace your NAT router with one that supports multiple VPN clients (often termed 'VPN passthrough').
Third, setup a site-to-site tunnel so that your entire LAN is connected to the VPN (this saves you from having to run a separate VPN client on each machine, but is typically only worth it when you have more machines). -
Need help with setting up a PPTP connection
Hello all,
I am having trouble setting up a PPTP connection in Mac OS X "Snow Leopard". The ISP has provided the following info:
— Protocol: PPTP
— Login
— Password
— IP Address
— Subnet mask
— Default Gateway
— IP Address of the VPN Server
I am using the Airport Express as rounter, so here's what I entered in the Airport Utility on the Internet tab:
Connection: Ethernet
IP Address (as provided)
Subnet mask (as provided)
Router address (from Default Gateway)
Then I went to Connections, and created a new PPTP connection, setting the properties of the latter as follows:
VPN Server (as provided)
Account name (from Login)
Authenrification->Password (from Password)
and chose "Send all traffic over VPN connection".
The Airport is reported to have connected successfully, but the specified VPN Serverd does not ping, and when I try to connect via PPTP, an error is displayed saying that the PPTP-VPN server did not respond. Playing with different Encryption types did not help.
This same connection, when set up on a Windows machine, works well so I think I must have goofed with the Mac OS X settings. Could you help me find out what I could have done wrong?
Thanks in advance,
AntonPete Corelio:
{quote}You do have more network devices, at least a dsl or cable modem and maybe a switch connected to it. Are your PC and the AX connected to the same modem/switch?{quote}
No. There's only the Ethernet cable leading to some central (building-wide, or even wider) device. It was routed to my friend's apartment by the ISP people.
{quote}It's a bit uncommon to manually set the IP address within the TCP/IP section of the VPN network settings like you did. That's usually set to automatically get an IP via PPP... Please try a quick test using PPP instead.{quote}
Having the AX using DHCP and VPN using PPP makes part of the ISP settings unnecessary... Hmmm. Anyway, I did try PPP in VPN connection settings, to no avail. Alas.
{quote}It's also suspicious that you cannot open a connection to port 1723 with the telnet command. Are you sure the VPN type is PPTP and not LT2P over ipsec?{quote}
Yes, I am sure. The ISP's support confirmed it over the phone. Also they said they hadn't been able to set up any Mac with their network, but I am loth to believe the latter statement. And I clearly remember it was PPTP (not LT2P) in the Windows settings.
{quote}lease verify the IP settings on your PC...{quote}
OK, will do this Wednesday. Also I'll take a closer look at the VPN settings.
{quote}So your PC is on the same network and the VPN works from there? Is the PC using 3rd party VPN software or the built-in software?{quote}
No other clients, just a VPN connection configured using Windows built-in tools.
Anton
EDIT:
{quote}'m assuming the Mac gets an IP in the 10.x range and gets online OK right? {quote}
The AX is saying it's connected but there's no internet. This ISP is providing access to the internet through that VPN. The same AX works well with my MacBook at home, although I am using PPPoE.
Message was edited by: Ant_222 -
PPTP connection stall, but still "connected"
Hi,
I just bought new iMac 2 wks ago. It comes with Lion 10.7.2.
Got problem on PPTP connection to my work.
Basically, I can create a PPTP setup (VPN) and make connection work. However, it won't last for long, at most 15-20 min, all web request just hang and existing ssh connection will be kicked out with "broken pipe" message.
I use PPTP with Max 128bit encryption. And also have a "Domain\Username" format login ID and a password as credential. I also let all my network flow go through this VPN.
Please help on this issue. Hope there is someone having the same problem and share the solution .I have the same problem with my iMac 24 & iMAc 27, both with Lion 10.7.2.
I use PPTP with out encryption.
I don't find any solution -
VPN auto connect leads problem when accessing the private url in my app through HttpClient
Hi,
I have app to execute my WCF service through HttpClient(). I configured my SSL VPN in sonicwall mobile connect with auto connect option. So when accessing my internal WCF service, Wp 8.1 asks the VPN connection screen. If I follow the screen, VPN
has connected and return to my App. But here I received "An error has ocurred. While sending request to server" in Wp 8.1 screen. Even if I debug through visual studio I couldn't catch or track the actual error in code. Below the code I am using
for your reference. Kindly help me in this regard.
try
HttpClientHandler handler = new HttpClientHandler(); ;
handler.AllowAutoRedirect = false;
HttpClient httpClient = new HttpClient(handler);
httpClient.MaxResponseContentBufferSize = 256000;
HttpResponseMessage response = await httpClient.GetAsync("http://172.0.0.11/xxxxx/Service1.svc/xxxxCheck/" + usr.username + "/" + App.DeviceId + "/" + usr.password);
response.EnsureSuccessStatusCode();
string content = await response.Content.ReadAsStringAsync();
List<EmcUserResult> userres = JsonConvert.DeserializeObject<List<EmcUserResult>>(content);
if (userres.FirstOrDefault().Allowed == "TRUE")
NavigationService.Navigate(new Uri("/MainPage.xaml", UriKind.Relative)); // call MainPage
else
MessageBox.Show("This User was blocked. Contact admin.");
catch (Exception ex)
MessageBox.Show(ex.Message);I recommend that you check the network traffic by using either Wireshark or Fiddler to see what's going on with the request.
Matt Small - Microsoft Escalation Engineer - Forum Moderator
If my reply answers your question, please mark this post as answered.
NOTE: If I ask for code, please provide something that I can drop directly into a project and run (including XAML), or an actual application project. I'm trying to help a lot of people, so I don't have time to figure out weird snippets with undefined
objects and unknown namespaces. -
Hello All - I have a VPN 3005 and W2K and XP clients connecting via MS VPN PPTP that was working with firmware version 4.0.5.A and bootrev 2.5 just fine. Updated firmware to 4.1.5.B and my users can authenticate (radius) but can neither ping nor resolve DNS. ipconfig info looks fine on the client. I downgraded to 4.0.5.B and it works fine again. Is there a problem with the 4.1.5.B firmware and the boot rev on this particular concentrator? I saw a note concerning the boot rev 2.5 and concentrators with serial#'s starting with CAM. Something about MAC Addresses being incorrectly reported. Or is it an incompatibility between MS VPN and rev 4.1.5.B? Need to setup and test WEbVPN. Any suggestions appreciated.
Thank in advance,
JAPI had the exact same issue with VPN 3015 after upgrading to 4.1.5.B. It forced all our users to ipsec. I'd be interested to see if you find a solution.
Todd -
VPN PPTP SBS2003 LCP: timeout sending Config-Requests
When using a 3rd party app (DigiTunnel), I can connect to my office network (Windows Small Business Server Premium 2003R2).
Using Internet Connect in 10.4.11, it worked a few times then stopped.
Here's the connection log:
PPTP connection established.
Using interface ppp0
Connect: ppp0 <--> socket[34:17]
sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x368b037d> <pcomp> <accomp>]
*LCP: timeout sending Config-Requests*
Connection terminated.
PPTP disconnecting...
PPTP disconnected
Any suggestions? TIAVPN has been a continuing issue in or organisation. There could be more than one issue problem causing the issues we have, however we have found that our Netgear router appears to have issues. After a bit of research on other forums I found other people who had flagged other Netgear routers as having similar issues and that VPN connections could be reestablished buy turning on and off settings with in the control panel for the router. Doing so jogs it working again for no apparent reason, even when the resulting settings are exactly the same as before.
It is because of this reason and other issues I have had with other Netgear routers that I have decided that I cant fully fix our issues with VPN until we have replaced our router with something more suitable.
Maybe you are looking for
-
HP Laserjet Pro 200 color MFP skipping even pages when scanning
my scanner skips ever other page when scanning. noticed other posts regarding a different model and wondering if there is a fix out there for the Laserjet Pro 200 MFP??? Please and Thank you!!
-
Cannot install windows 7 (downgrade from Windows 8.1 on Lenovo U330 Touch)
Hello. I wanted to downgrade my new Lenovo U330 Touch from Windows 8.1 to Windows 7 (x64 Home Premium). I followed the instructions from this previous forum post... https://forums.lenovo.com/t5/IdeaPad-Y-U-V-Z-and-P-series/U330-Touch-Downgrading-to-W
-
Remove Header when running report with ALV output
Hi, We are running ITS Version 6200.1022.63326.3, Build 84960 connecting to R/3 Enterprise 4.7 on 6.40 Kernel Patch 196. I have a situation where I run a report through ITS, starting with a selection screen, I can remove the header part of the ITS ge
-
i am told to change my setting i need to go to bthomehub.home but every time i try i get told the the host is not there i have try it about five time now and i get the same message . Solved! Go to Solution.
-
My husband saved a load of photos and video clips to icloud, please help.
my husband saved a load of photos and video clips to icloud, my phone has been taken so i no longer have it but didnt know how i can get up my photos without my phone please help.