[vpn-help] VPN Client not working over wireless connection

[Wells,Chris,OAKLAND,IS/IT]

Additional information:

We have another Win7 64bit system having no issues with the Shrew client
over wireless.  Here are the main differences between the two wireless
devices:

On the system that works over wireless
- Intel PRO/Wireless 3945ABG, using the Microsoft Driver(from Intel) ver
12.4.1.4 (netw5v64.sys)

On my system (doesn't work over wireless)
- Broadcom 802.11g Network Adapter, using the Broadcom driver ver
5.30.21.0 (BCMWL664.sys & vwifibus.sys)

I have never been a fan of the Broadcom network cards, but it's all I
have to work with on this system.

Any thoughts on this, or the routing table dumps I sent earlier in the
week?

-Chris

-----Original Message-----
From: Wells,Chris,OAKLAND,IS/IT 
Sent: Tuesday, January 05, 2010 4:57 PM
To: 'Matthew Grooms'
Subject: RE: [vpn-help] VPN Client not working over wireless connection

I have a profile setup for both options, split-tunnel and a single route
for everything.
Attached are three files showing my routing table before and after a
successful VPN connection.

What's odd is I have no problem connecting with the NCP client over
wireless, but for some reason I'm unable to connect with the Shrew
client.  I work for Dreyer's/Edy's Ice Cream, and there are a few of us
testing out Win7 64bit for virtualization, and it would be cool to get
this working over wireless connections.

-Chris

-----Original Message-----
From: Matthew Grooms [mailto:mgrooms at shrew.net]
Sent: Tuesday, January 05, 2010 4:19 PM
To: Wells,Chris,OAKLAND,IS/IT
Cc: vpn-help at lists.shrew.net
Subject: Re: [vpn-help] VPN Client not working over wireless connection

On 12/29/2009 8:01 AM, Wells,Chris,OAKLAND,IS/IT wrote:
> I'm running the 2.1.5 rc4 build on Windows 7 64bit.  I was able to 
> import my Cisco pcf files and connect to our corporate VPN over a 
> wired connection, as well as my Verizon air-card, but I'm unable to 
> connect using my wireless connection (from any location: home, 
> airport, hotel, etc).  I verified the Shrew Soft Lightweight Filter is

> enabled for my wireless connection, but it's still unable to create a
VPN tunnel.
>
> To rule out Windows firewall settings, I installed the NCP version and

> it connects over my wireless connection (and all other connections) 
> without issue.  I really like the work you've put into the Shrew 
> client so far, and would prefer to stick with it as a solution.  I 
> must be overlooking something simple.  Can you point me in the right
direction?
>

Hi Chris,

When the connection works, does the client negotiate a single policy
that matches 0.0.0.0/0? If the gateway doesn't provide networks for
split tunneling, this is the default behavior. One thing to note about
this type of configuration is that a new default route is created that
specifies the virtual adapter address as the gateway. I have seen some
wireless adapters actively 'manipulate' route metrics after they have
been created to ensure the wireless adapter maintains the highest route
priority for connectivity when the radio is enabled. This is incredibly
difficult to work around.

What does your route table look like before and after connecting?

Thanks,

-Matthew