<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
<title>Debugging tunnel issues on Mac OS VPN Client</title>
</head>
<body>
<font face="Calibri, Verdana, Helvetica, Arial"><span style="font-size:11pt">Hello,<br>
I’ve been doing some testing of the Mac VPN client following a few posts in the archives. I believe I installed the stack correctly, but I’m running into issues establishing & maintaining a tunnel.<br>
<br>
Background:<br>
I just started working with a client that uses the Shrew VPN client on windows machines with a Cisco solution. To test connectivity I installed the Shrew windows client (2.1.7) on a Windows 7 VM and I’m able to connect & authenticate using the .PCF file they
provided.<br>
<br>
The problem is that most members of my development team (including myself) use Macs. After installing the stack on my Mac and attempting to connect, the session is terminated by the gateway after about 30 seconds. During the ~30 seconds it appears that I’m
connected (I get the confirmation / help desk message from the host), but I’m not able to ping any resources on the network.<br>
<br>
I noticed that the VPN trace utility isn’t available in the Mac version, so I’m not sure how much extra information I can provide. The trace from the Access Manager is included below.
<br>
<br>
If anyone has any insight about how to proceed I’d love to hear it.<br>
<br>
Thanks for your time,<br>
Mario<br>
<br>
<br>
Platform:<br>
----------------------------------------------<br>
Mac OX 10.6.7<br>
qt 4.7.1<br>
tuntap 20090913<br>
ShrewSoft VPN Mac client 2.2.0<br>
<br>
<br>
ACCESS MANAGER LOGS:<br>
----------------------------------------------<br>
Windows Client (successful):<br>
----------------------------------------------<br>
config loaded for site '******.pcf'<br>
configuring client settings ...<br>
attached to key daemon ...<br>
peer configured<br>
iskamp proposal configured<br>
esp proposal configured<br>
client configured<br>
local id configured<br>
pre-shared key configured<br>
bringing up tunnel ...<br>
network device configured<br>
tunnel enabled<br>
----------------------------------------------<br>
Mac Client (not successful):<br>
----------------------------------------------<br>
config loaded for site '*****'<br>
attached to key daemon ...<br>
peer configured<br>
iskamp proposal configured<br>
esp proposal configured<br>
client configured<br>
local id configured<br>
remote id configured<br>
pre-shared key configured<br>
bringing up tunnel ...<br>
network device configured<br>
tunnel enabled<br>
<br>
~30 seconds<br>
<br>
session terminated by gateway<br>
tunnel disabled<br>
detached from key daemon<br>
-- <br>
</span></font><font color="#7F7F7F"><font size="1"><font face="Arial"><span style="font-size:7pt"><b>mario russo +
</b></span></font></font></font><font size="1"><span style="font-size:7pt"><b><font color="#656565"><font face="Verdana, Helvetica, Arial">R O U N D</font></font><font face="Verdana, Helvetica, Arial"><font color="#FE6500"> A R C H</font></font><font color="#7F7F7F"><font face="Arial">
+ mob 404.290.2328</font></font></b></span></font><font face="Calibri, Verdana, Helvetica, Arial"><span style="font-size:11pt"><br>
</span></font><br>
<hr>
<font face="Arial" color="Gray" size="1">The information contained in this email message and its attachments is intended only for the private and confidential use of the recipient(s) named above, unless the sender expressly agrees otherwise. Transmission of
email over the Internet is not a secure communications medium. If you are requesting or have requested the transmittal of personal data, as defined in applicable privacy laws by means of email or in an attachment to email, you must select a more secure alternate
means of transmittal that supports your obligations to protect such personal data. If the reader of this message is not the intended recipient and/or you have received this email in error, you must take no action based on the information in this email and
you are hereby notified that any dissemination, misuse or copying or disclosure of this communication is strictly prohibited. If you have received this communication in error, please notify Roundarch immediately by email and delete the original message.<br>
</font>
</body>
</html>