Networks

Ask something
Discussion Locked

Cisco VPN 3000 user disconnecting

0 helpful
7 replies

by link cornelius

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

The user is in Amsterdam and has a DSL connection to the Internet. His laptop connects to an external Alcatel DSL modem via his Ethernet card. He has a dial-up networking (or whatever it is called in Window 2000) connection that is configured to create a PPTP tunnel to his DSL provider. He has to initiate this connection and authenticated before he can use his DSL. After he successfully authenticates he can browse the Internet normally. However, when he tries to use his VPN client to connect to our VPN 3005 concentrator in Mission Viejo, CA, he gets authenticated, but no data is passed. His vpn client statistics shows that he is sending data but not receiving anything. We have tried every possible configuration setting on his clientwithout success. I have attached the log from the concentrator when he tried several connection attempts with different configuration settings on his client.

He gets his user ID and enters his password. But after that it hangs on Securing Channel.

It works from everywhere else.

7 replies

by mshavrov

First place where you should see for a solution - VPN Concentrator's log file. Turn on required Classes to be putten into the log or to Syslog (Configuration -> System -> Events -> Classes). Add AUTH, AUTHDBG, PPTP, PPTPDBG, etc. Actually, you may aadd all classes, but then firewalllog will be filled up very quickly. This will tell you at which stage of connection does it fails.

Second: Try to delete existing client's PPTP connectionand re-create it again, step-by-step accorging to procedure.

Third: If you can simulate user's connection (use his username and password from your home, for example), try it. May be user has something screwedup in RADIUS Server account? Check which group is assigned to the user, try to assign him to another group.

And fourth: Since you have VPN3005 Concentrator, you may use Cisco VPN Client. It's much stronger on network side and way easy on client's configuration. All you need to configure on client's machine - IP Address of VPN3005, group & user passwords or Certificate.

by mshavrov

I have experience configuring PPTP between Windows 2000 and PIX Firewall (or router). But my tries to make it working on VPN3015 was unsuccesful (I tried it 2-3 times and I switched myself to Cisco VPN Client).

Is he only PPTP client or you have somebody else who have success in this?

And try this link. It describes how to configure VPN3000 with PPTP client:

http://www.cisco.com/warp/public/471/altigapptp.html

Goodluck.

by link cornelius

I have tried his account from a different location and it worked their. Also I am using the VPN client. Do you know if I enable PPTP can the client connect with that protocol or would I have to set up a windows DUN connection using pptp?

by j_vangulik

I know this is way late, but it may help someone else.

We had these symptoms (connection is made but no data transfer) with a DSL connection. The issue turned out to be the MTU size. Once the packet is encrypted with VPN, the packet size increases. Unfortunately, the PPPoE implementation also increases the packet size, making it too big. So the default ethernet size (1500) is too big. We dropped it to 1400 and it worked fine after that.

This discussion is closed to new replies.