From: John Navas on
On Mon, 15 Dec 2008 23:05:39 +0000, James Hendry <JTHendry(a)uklinux.net>
wrote in <gi6nvb$15nv$1(a)energise.enta.net>:

>John Navas wrote:

>> What does that you can "reach the VPN server" mean? Ping it? Connect
>> but not see the remote network? Can the company see your connection
>> from home?
>
>Hi, yes, it means that the Cisco Client tells me that a connection has
>been made.
>I can ping the host, avg 70ms, nothing reachable on the remote network
>after connecting.

1. Can the company see your connection? Have them check the log.
2. What's the routing from your end?
--
Best regards, FAQ for Wireless Internet: <http://wireless.navas.us>
John Navas FAQ for Wi-Fi: <http://wireless.navas.us/wiki/Wi-Fi>
Wi-Fi How To: <http://wireless.navas.us/wiki/Wi-Fi_HowTo>
Fixes to Wi-Fi Problems: <http://wireless.navas.us/wiki/Wi-Fi_Fixes>
From: James Hendry on
John Navas wrote:
> On Mon, 15 Dec 2008 23:05:39 +0000, James Hendry <JTHendry(a)uklinux.net>
> wrote in <gi6nvb$15nv$1(a)energise.enta.net>:
>
>> John Navas wrote:
>
>>> What does that you can "reach the VPN server" mean? Ping it? Connect
>>> but not see the remote network? Can the company see your connection
>>> from home?
>> Hi, yes, it means that the Cisco Client tells me that a connection has
>> been made.
>> I can ping the host, avg 70ms, nothing reachable on the remote network
>> after connecting.
>
> 1. Can the company see your connection? Have them check the log.
> 2. What's the routing from your end?

Hi John, I'll get them to check in the morning, its midnight here...
thanks, Jim
From: Peter Pan on
James Hendry wrote:
> John Navas wrote:
>> On Mon, 15 Dec 2008 22:26:45 +0000, James Hendry
>> <jthendry(a)uklinux.net> wrote in <gi6lj5$11ku$1(a)energise.enta.net>:
>>
>>> Hi, I was wondering if anyone would can help,
>>>
>>> I have a Linksys WAG354G v2... setup this has been running fine,
>>> for over a year now, however I recently had to do some work from
>>> home and vpn'd into my company's network. The problem is that I can
>>> reach the VPN server, but cannot do anything else such as network
>>> file system or run RDP sessions.
>>> I am sure the problem lies with my linksys gateway as I can take
>>> the same laptop to a hotel connection and connect to all of the
>>> company resources and RDP applications.
>>> My ISP tells me that there are no blocked ports, hence the focus on
>>> the WAG354G.
>>>
>>> I have enabled in the gateway, ipsec, etc... can anyone shed any
>>> light on what I may have missed ??
>>>
>>> all of these are enabled...
>>>
>>> IPSec Passthrough:
>>> PPPoE Passthrough:
>>> PPTP Passthrough:
>>> L2TP Passthrough:
>>>
>>> Firmware 1.01.58
>>
>> What kind of VPN? Will it work if you remove the Linksys WAG354G v2?
>> (Bonus points for posting model and firmware version.)
>
> Hi John,
> The gateway is the only method I have of connecting to the net so
> unable to remove it, i.e. modem built in.
>
> The utility provided to me is a Cisco Systems VPN client software Ver
> 4.8.01.0300
>
> The company Host IP address is entered and the transport is IPSec/UDP
>
> transparent tunneling, IPSec over UDP(NAT/PAT)
>
>
> I just launch the client select the connection and connect... if from
> anywhere else other than my home it connects ok....
>
> Jim

so it works from other places that have no gateway, but doesn't from home
where you have a gateway pointing to who knows what?.... hmmmm VPN and a
gateway........
sounds similar, i am at my sisters for the holidays, brought my wap/router,
she's on comcast cable, with the gateway on the wap/router set to my other
isp, worked fine with other stuff until I tried a vpn, didn't work, had to
reconfigure so I didn't need a gateway at all (tech support was useless,
found a manual for the comcast cable modem online, reconfiggered it, don't
need a gateway anymore, and now vpn works)... not saying for sure that may
be the problem, but you may want to get things working without a gateway and
see if that helps....


From: Chrisjoy on
On Dec 15, 11:26 pm, James Hendry <jthen...(a)uklinux.net> wrote:
> Hi, I was wondering if anyone would can help,
>
> I have a  Linksys WAG354G v2... setup this has been running fine, for
> over a year now, however I recently had to do some work from home and
> vpn'd into my company's network. The problem is that I can reach the VPN
> server, but cannot do anything else such as network file system or run
> RDP sessions.
>   I am sure the problem lies with my linksys gateway as I can take the
> same laptop to a hotel connection and connect to all of the company
> resources and RDP applications.
> My ISP tells me that there are no blocked ports, hence the focus on the
> WAG354G.
>
> I have enabled in the gateway,  ipsec, etc... can anyone shed any light
> on what I may have missed ??
>
> all of these are enabled...
>
>         IPSec Passthrough:      
>         PPPoE Passthrough:      
>         PPTP Passthrough:      
>         L2TP Passthrough:      
>
> Firmware 1.01.58
>
> Many Thanks, Jim


1) Turn off the firewall on the router.
2) Set DMZ on the rounter to the IP of the machine you're running
Cisco VPN client.

If VPN connection now works, you know it's either firewall or lack of
portforwarding that is stopping your packets.

3) Ask IT Guru at work what port(s) is needed to be forwarded from
outside into the Client, and set this port forwarding on your router
to point to client IP on the same port. I put an apple on port 500

3) Ask IT Guru and what ports needed to be traversable in both
direction, and add these ports in the firewall on the router, or drop
the firewall all tothether. It's a joke. If you like a FW, I would put
another apple on port, 50, 500, 1701 and 10000.

From: John Navas on
On Tue, 16 Dec 2008 00:41:51 -0800 (PST), Chrisjoy
<ultralibertarianer(a)gmail.com> wrote in
<097ff3d3-3a4a-47f6-91d0-e4006b226917(a)r24g2000vbp.googlegroups.com>:

>1) Turn off the firewall on the router.
>2) Set DMZ on the rounter to the IP of the machine you're running
>Cisco VPN client.
>
>If VPN connection now works, you know it's either firewall or lack of
>portforwarding that is stopping your packets.

I doubt that will work, but still might be worth trying, but only for
very limited testing, not left that way, because it's dangerous.

Would be a good idea to install a good software firewall before doing
that -- the one in XP is not terribly good. I now use and recommend
free COMODO Internet Security, a combination of very good anti-virus,
firewall, and system defense. <http://www.comodo.com/>
--
Best regards, FAQ for Wireless Internet: <http://wireless.navas.us>
John FAQ for Wi-Fi: <http://wireless.navas.us/wiki/Wi-Fi>
Wi-Fi How To: <http://wireless.navas.us/wiki/Wi-Fi_HowTo>
Fixes to Wi-Fi Problems: <http://wireless.navas.us/wiki/Wi-Fi_Fixes>