[vpn-help] Require help with troubleshooting samba shares over ipsec

Matthew Grooms mgrooms at shrew.net
Wed Aug 11 01:32:29 CDT 2010


On 8/9/2010 8:32 PM, Brett Morrison wrote:
> Hi all
>
> We are having trouble with some Samba shares on one of our servers not
> being accessible by one of our guys that works remotely.
>
> He is connecting using Shrewsoft VPN client 2.1.5, OS is Windows 7 pro
> 32bit. He can ping the server, can use SSH to connect to the terminal
> software on the server, but shares do not come up in windows explorer.
> This has been tested on my laptop as well with the same setup, which has
> the same problem.
>
> Inside the network, there is no problem, all win 7 clients can connect
> without a problem.
>
> Any ideas?
>

Hi Brett,

One thing to check is if the user's OS has a clock time that's way out 
of sync with the server in question. I know this sounds odd, but I ran 
into a similar problem when running the WinQual tests with a Windows 7 
host. I could not access a file share until I adjusted the clock to be 
closer to the DTM controller clock that hosted the share.

You can also try to lower the MTU on the virtual adapter. This has been 
reported to fix problems like the one you are experiencing.

Another thing to try is to test this build. Its a long shot, but one of 
the firmware engineers from a security appliance manufacturer recently 
noticed that our client sometimes added too much padding when encoding 
ESP payloads in certain situations. Luckily, they were nice enough to 
inform me of the problem so it could be resolved. Here is a test build 
that includes the fix ...

http://www.shrew.net/download/vpn/vpn-client-2.1.6-espfix-1.exe

... But like I said, its a long shot.

Let me know how it goes,

-Matthew



More information about the vpn-help mailing list