• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1674
  • Last Modified:

VPN not passing traffic using Verizon Wireless and NCP client

Hi,
I am having a problem getting my VPN (Juniper SSG5) to pass traffic when using an internet connection via a tethered blackberry over the Verizon Wireless network.

In the past, I used Netscreen Remote on Windows XP. To get the VPN to work, I had to manually start the Netscreen service after establishing the Verizon connection. It worked great.

Now, I upgraded to Windows 7 and NCP Secure Client. I am having the same problem as before. The VPN will connect, but no traffic is passed. The same VPN profile works fine when I am at home using my cable ISP.

I have tried the following:
1) Internet Connection Sharing
2) Network Bridging
3) Starting NCP services after establishing a Verizon Connection

Any suggestions?

Thanks!
0
wn411
Asked:
wn411
  • 12
  • 5
  • 3
1 Solution
 
fs40490Commented:
Have you looked at the routes after the connection is established?

It sounds as though there is not a route into the VPN tunnel thus your traffic is trying to go out the tethered connection.
0
 
wn411Author Commented:
Yes I think you are right. What can I do to correct it? When I login to the VPN, I use a private IP on the VPN adapter. This works fine on the connections mentioned above. Is there a way I can fix the route on my laptop?
0
 
fs40490Commented:
You can open a command prompt as an administrator and add a route.

route add xxx.xxx.xxx.xxx MASK yyy.yyy.yyy.yyy ggg.ggg.ggg.ggg IF zz

xxx is the network you are routing to
yyy is the subnet mask
ggg is the gateway used to get to the network
IF is the interface number if left blank it will try the best interface, zz is the number of the interface

This process would need to be completed everytime your connect the VPN.

Just curious what is NCP?  We have also used NSR in the past but I am not familar with NCP.  There may be an option in there to add a route upon sucessful connection.
0
Improve Your Query Performance Tuning

In this FREE six-day email course, you'll learn from Janis Griffin, Database Performance Evangelist. She'll teach 12 steps that you can use to optimize your queries as much as possible and see measurable results in your work. Get started today!

 
wn411Author Commented:
OK, thanks I am going to try that! Thanks. Is there also a GUI for this too? I will try command line and report back. NCP Secure Client is the VPN software I am using. They make a generic and vendor specific version. I am using the Juniper version as a replacement for Netscreen Remote as per the Juniper partnership mentioned due to the end of life for Netscreen Remote.
0
 
wn411Author Commented:
Hi, set a route on the VPN interface to:
private IP, MASK, IP of Verizon Connection.

That did not work. Do have any other suggestions?
0
 
fs40490Commented:
Does your VPN actually connect?  If it makes the connection, make sure that the IP address the client is assigned to the VPN Tunnel interface is used as the gateway.

0
 
wn411Author Commented:
Sorry for the delay. Yes, it does connect fine it just does not pass traffic. I am using the same profile as on my old laptop running XP.  I checked the virtual adapter settings and I have the private IP as the gateway. I also tried entering the IP of my internet connection. But that did not work either :(
0
 
JohnBusiness Consultant (Owner)Commented:
I use the generic version of NCP and find that it handles double NAT arrangements (like your Blackberry connection) very well.  Consider trying the generic version. They have a full function trial period of 30 days. I, too, used Netscreen Remote when I had XP and it could not handle all the connection circumstances that generic NCP can handle.

Also, in generic NCP, I needed to add the server end subnet in the Split Tunnelling setup of the Profile.

... Thinkpads_User
0
 
wn411Author Commented:
OK, thanks. I am going to uninstall the Juniper version and install the generic version. I hope they can give me a refund in the juniper version if this generic version works.

Yes, I also have the split tunneling in the Juniper version.

I will let you my result shortly.
0
 
wn411Author Commented:
OK this is working now via the cellular connection! All I need to do is test my normal LAN connection at home and report back. Would also be nice if this worked of my wireless LAN as well. I will let you know! Thanks!
0
 
JohnBusiness Consultant (Owner)Commented:
Thanks. I only have one profile per client and it works on all connection types. ... Thinkpads_User
0
 
wn411Author Commented:
OK, now it is not working on my LAN at home. But, still working via the cellular connection. My home LAN uses the 192.168.x.x and my VPN uses 10.0.n.n.  So, I will play with some settings tomorrow and report back. I am using the same profile as well.
0
 
wn411Author Commented:
BTW, the VPN will connect at home. But, traffic will not pass. Basically the same problem I had on the cellular connection using the Juniper NCP Client.
0
 
JohnBusiness Consultant (Owner)Commented:
Perhaps in this case, use a different profile for home (wired, wireless) and the other one for cellular. Give them diffeent names and then set each one up for its own unique settings. ... Thinkpads_User
0
 
wn411Author Commented:
OK, this is odd. The connection worked fine over my wireless lan once today when i booted up. Then, it wont work. The VPN will connect, but no traffic will pass. The same profile works fine using the cellular connection. I tried sharing connections, playing with gateway IPs, and disabling zonealarm, I also confirmed I have VPN passthrough enabled on my home router. It seems like a gateway issue? Internal routing issue? I am stumped.
0
 
wn411Author Commented:
I also tried killing all the NCP services, establishing a network connection, then starting the ncp services. Still nothing. VPN connects. But, no traffic passes.
0
 
JohnBusiness Consultant (Owner)Commented:
I am not sure what to say. You said the Juniper OEM version of NCP works with a standard connection at your home but not tethered to Blackberry. You then said the generic version of NCP works tethered to Blackberry but not over your home connection. That is indeed strange because we would not expect the generic and OEM versions to be too radically different.

There is probably some other routing issue as you say, but it is hard to say what from here and further, I am by no means a routing expert.   .... Thinkpads_User
0
 
wn411Author Commented:
Yes, you summed it up! Juniper version works over home lan great but not will cellular. Generic works great over cellular and not lan. Yes, I am going to play with this more today and report back.
0
 
wn411Author Commented:
Thanks I am closing the questions and sending you the points. You solved my problem. Thanks. My new issue is a routing problem that I will post elsewhere. I so like the generic NCP client a lot better.
0
 
JohnBusiness Consultant (Owner)Commented:
Thank you. I like NCP as well. Good luck with the routing issue. .... Thinkpads_User
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Get expert help—faster!

Need expert help—fast? Use the Help Bell for personalized assistance getting answers to your important questions.

  • 12
  • 5
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now