asked on

VPN and Citrix Meta Frame

This is not my strong suit, so I thank you all in advance for any assistance.

We have users connecting to our office via Cisco VPN to a VPN concentrator and then Opening a citrix connection to Citrix XP on windows 2k. all service packs and security updates processed. The users connect over their existing internet connections. All users connect fine except for 2. They are using Optimum Online with USB adapters. The cisco vpn client connects properly and is assigned an IP address properly. The concentrator responds properly and the connection is recorded. Once you try to connect via citrix, it fails immediately with unable to find server. you are unable to ping any of the servers or any IP address for that matter.

Any thoughts?

Completely Stumped.

bdurward

Since both on that network have the problem, it could be network settings on those pc's. If they are using PPToE on DSL or other to connect, there may be a TCPIP MTU size mismatch sometimes results in disconnections, dropped packets and VPN troubles. Windows defaults to 1500 MTU, the maximum packet size is for PPToE is 1492, or 1490 with overhead considered. For VPN problems you might need to start lower, maybe 1200, and gradually increase the mtu untill you loose your Citrix.

MTU size can be adjusted by editing the registry, but varies slightly for each Windows OS. I recommend a small utility program, DRTCP found on:
http://www.dslreports.com/drtcp

This will modify all the TCPIP settings for Windows95 -> xp, but you will only need to change the MTU size. Reboot 95, 98, ME to pick up the new settings, or
in 2000 or xp disable and reenable the connection.

Definately a perplexing problem that I had to wrestle with earlier this year!

ASKER CERTIFIED SOLUTION

bdurward

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

bdurward

A workaround for those two might be using the MetaframeXP webclient to connect citrix using http instead of the VPN setup.

DPrekel

ASKER

Thank you very much. We are unable to use the webclient at this time, but the little DRTCP file did the trick. I now have happy users again - well, temporarily.

Thanks again

bdurward

Sounds like you are back up now, why don't you close the question?