[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1392
  • Last Modified:

VPN connects but no ping/rdc into network.

Hi,
I have Vista Business laptop and Cisco VPN Client to admin a client's server.
2 entries in VPN Client :
one for network A using IPSec/TCP-10000 -> Works fine
one for network B using IPSec/UDP - Can connect but no ping/rdc into network B servers.
Tried the same connection (network B) with another PC with WinXP SP2 and work fine.
Tried to connect using a direct connection to Internet and it still wont work.

I'm getting a valid IP for VPN Client. As far as i can see all seems OK in VPN Client.
Disabled Wireless and still wont work.
Any ideas ??
Thanks
0
jpaulo_almeida
Asked:
jpaulo_almeida
1 Solution
 
grbladesCommented:
Hello jpaulo_almeida,

What version of the VPN client are you using?

Regards,
grblades
0
 
jpaulo_almeidaAuthor Commented:
Cisco  VPN Client, 5.0.00.0340
0
 
grbladesCommented:
That is a vista compatible release but a very early version (5.0.00.0320 was a beta). I have seen 5.0.01.0600 so I would suggest upgrading just incase there is an unsupported feature or bug in your version.
0
VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

 
jpaulo_almeidaAuthor Commented:
Tried upgrading VPN Client (5.0.01.0600), but no sucess to the problem.
uninstall & install worked fine.
IPSec/TCP is OK but IPSec/Udp is not. Same problem.
here is a ipconfig /all (wireless adapter is disabled now) :

Any ideias ?
thanks,
-------------------------------------------
C:\Program Files\Microsoft SDKs\Windows\v6.0>ipconfig /all

Windows IP Configuration

   Host Name . . . . . . . . . . . . : APC55
   Primary Dns Suffix  . . . . . . . : Milenio3srv3.local
   Node Type . . . . . . . . . . . . : Hybrid
   IP Routing Enabled. . . . . . . . : No
   WINS Proxy Enabled. . . . . . . . : No
   DNS Suffix Search List. . . . . . : Milenio3srv3.local

Ethernet adapter Local Area Connection:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Cisco Systems VPN Adapter
   Physical Address. . . . . . . . . : 00-05-9A-3C-78-00
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
   IPv4 Address. . . . . . . . . . . : 192.168.253.105(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : 192.168.253.1
   DNS Servers . . . . . . . . . . . : fec0:0:0:ffff::1%1
                                       fec0:0:0:ffff::2%1
                                       fec0:0:0:ffff::3%1
   NetBIOS over Tcpip. . . . . . . . : Enabled

Ethernet adapter Local Ethernet:

   Connection-specific DNS Suffix  . : Milenio3srv3.local
   Description . . . . . . . . . . . : Intel(R) 82566MC Gigabit Network Connect
on
   Physical Address. . . . . . . . . : 00-15-B7-2F-50-6B
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes
   Link-local IPv6 Address . . . . . : fe80::a53b:1e77:93d5:ee10%8(Preferred)
   IPv4 Address. . . . . . . . . . . : 192.168.2.153(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Lease Obtained. . . . . . . . . . : quinta-feira, 18 de Outubro de 2007 16:2
:03
   Lease Expires . . . . . . . . . . : quinta-feira, 25 de Outubro de 2007 16:3
:04
   Default Gateway . . . . . . . . . : 192.168.2.71
   DHCP Server . . . . . . . . . . . : 192.168.2.71
   DHCPv6 IAID . . . . . . . . . . . : 201330299
   DNS Servers . . . . . . . . . . . : 192.168.2.71
                                       192.168.2.69
   Primary WINS Server . . . . . . . : 192.168.2.71
   Secondary WINS Server . . . . . . : 192.168.2.69
   NetBIOS over Tcpip. . . . . . . . : Enabled

Tunnel adapter Local Area Connection* 6:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Microsoft ISATAP Adapter
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
   Link-local IPv6 Address . . . . . : fe80::5efe:192.168.253.105%27(Preferred)

   Default Gateway . . . . . . . . . :
   DNS Servers . . . . . . . . . . . : fec0:0:0:ffff::1%1
                                       fec0:0:0:ffff::2%1
                                       fec0:0:0:ffff::3%1
   NetBIOS over Tcpip. . . . . . . . : Disabled

Tunnel adapter Local Area Connection* 18:

   Connection-specific DNS Suffix  . : Milenio3srv3.local
   Description . . . . . . . . . . . : Microsoft ISATAP Adapter #2
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
   Link-local IPv6 Address . . . . . : fe80::5efe:192.168.2.153%26(Preferred)
   Default Gateway . . . . . . . . . :
   DNS Servers . . . . . . . . . . . : 192.168.2.71
                                       192.168.2.69
   NetBIOS over Tcpip. . . . . . . . : Disabled

0
 
grbladesCommented:
Sorry I dont have any furthur ideas. Someone like lrmoore might have a better idea.
0
 
jpaulo_almeidaAuthor Commented:
Please,
Any ideas ??
I'm sure this is a problem with my Vista installation, because in XP it works fine.
Thanks in advance.
0
 
grbladesCommented:
Have you tried email lrmoore and asking him to take a look. His email address is in his profile.
0
 
zippy_paulCommented:
I have the same problem in regards to my DNS servers.  It's happening on two different Vista computers to many different routers.  I am running
5.0.02.0090 on one, and 5.0.03.0530 on the other.
both of them experience the same problem.
Other than the bogus DNS, everything is working fine.  It's not the Cisco Router because other computers can connect fine.
I've reinstalled many times.  Now even older versions are giving the same result on the same computers.
The DNS i get assigned is
fec0:0:0:ffff::1%1
fec0:0:0:ffff::2%1
fec0:0:0:ffff::3%1

Does anyone know what has happened here?  i can't find much on the net.
0
 
fortchCommented:
I know this is a bit old, but I'm experiencing the exact same issue. The DNS appears due to ISATAP implementation in Vista for ipv6, I believe. My XP VPN clients (Cisco IPSec/UDP) connect and access resources fine, but my Vista clients are hit-and-miss. Every time I ipconfig/all and compare it to a working Vista connection, the DNS is the main difference.

For us, we have a 515 handing out the regular ipv4 DNS addresses for our DC's, but this is somehow translated by Vista's ipv6 stack? Some info I'm reading says that this is perfectly normal, and others say that ISATAP (or the MS implementation) is a poor 'piggyback' hack to get ipv6 testing on ipv4 networks. Obviously, I'll try disabling the ipv6 option on the interface and post the results.
0
 
jpaulo_almeidaAuthor Commented:
Hello,
My solution :
Get Cisco VPN client 5.0.02.0090 or later
Get latest Deterministic Network Enhancer update (from their site)
(without any VPN client installed on your Vista)
1. Install the downloaded Deterministic Network Enhancer Update. Reboot.
2. Install Cisco VPN client 5.0.02.0090 or later
3.Deactivate the IPv6 protocol for each network adapter. On the properties tab simply uncheck IPv6.
Then select Sharing Tab and uncheck the box "Allow other network users to connect through this computer's Internet connection". Save and repeat for each network adapter.
4.Start the command line prompt as administrator and enter following line:
reg add HKLM\System\CurrentControlSet\Services\Tcpip\Parameters /v ArpRetryCount /t REG_DWORD /d 1 /f
5. Reboot
Notes : This was copied from a web page (donĀ“t have the link anymore). Works most of the time. Sometimes a reboot helps if your getting "Falied to enable network adapter".
It also helps to disable other ethernet interfaces like wi-fi or other.
This is my experience. I have about 6 connections working in my laptop to diferent locations.
0
 
jpaulo_almeidaAuthor Commented:
After a while i found the link i used :
http://www.myself.ch/vpn/#English_Version
The credits go to Serge Urech for the instructions.

Enjoy :)
0
 
Computer101Commented:
PAQed with points refunded (500)

Computer101
EE Admin
0

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now