Welcome to the MacNN Forums.

toconnor · Oct 30, 2003, 08:18 PM

Hi,

I was using Cisco VPN client 4.0.1A and OS X 10.2.6 without any problems. Upgrading to 10.3, though, has resulted in Cisco VPN client failing to connect. I've also tried 4.0.2C for the client. The error message I see is:

"Warning 201: The necessary VPN sub-system is not available. You can not connect to the remote VPN server."

This has prevented me from connecting to my work network which is not good. Has anyone else run into any Cisco VPN client / OS 10.3 problems? Since we're primarily a PC shop I'm on my own to solve this. VPN, BTW, is working for other users (on PC's of course).

Thanks,
Todd

Boochie · Oct 30, 2003, 08:37 PM

I use the Cisco VPN3000 client. I did an Archive and Install to get to 10.3. Afterwards I had to reinstall the Cisco VPN client. The application was still in the apps folder, but some of the modules it had put into /System were no longer there (swept away when 10.2.8 was archived). You may have a similar situation.

redwood · Oct 30, 2003, 09:11 PM

A couple of things. #1) A reboot has solved this for a number of people. Even though the installer doesn't call for a reboot, it turns out one is needed, this certainly fixed it for me.

#2) There's a way to get this to work by hand through terminal by stopping and starting the VPN subsystem. All you have to have are terminal.app and sudo enabled:

a) Launch terminal (from utilities folder)

b) enter: sudo /System/Library/StartupItems/CiscoVPN/CiscoVPN stop

c) enter: sudo /System/Library/StartupItems/CiscoVPN/CiscoVPN start

Hope this helps.

toconnor · Oct 30, 2003, 11:04 PM

Thanks for the replys. I guess I have egg on my face. I thought I had rebooted after the install. I did discover that after the upgrade to 10.3 (also an Archive & Install) that even though the VPN app was still in Applications many other pieces were gone. I reinstalled 4.01A but still no luck. That's when I installed 4.0.2C. Anyways tonight from home all is working well.

So the older app may have been an issue but for sure it was the lack of reboot after the installs.

Thanks again.

Todd

sniffer · Oct 31, 2003, 04:50 AM

Had the same problem. Downloaded a new version from my uni, and guess what, they had downgraded to a previous version pre 4.x.x.
Anyway, it worked right away.
If it only worked with the built in VPN client I would be happy. After reading the Apple 10.3 forums I think the built in version lacks group authorization or something like that.
More convenient with the built in, since it's probably more suited for people with laptops going to sleep several times a day.

Boochie · Oct 31, 2003, 07:45 AM

I too was hoping that the built-in VPN client would do the trick -- one less third-party modification to the system, and hopefully one less potential source of instability. Fortunately, everything has been just fine with the Cisco software under Panther.

CatOne · Oct 31, 2003, 12:50 PM

Originally posted by Boochie:
I too was hoping that the built-in VPN client would do the trick -- one less third-party modification to the system, and hopefully one less potential source of instability. Fortunately, everything has been just fine with the Cisco software under Panther.

The default Cisco doesn't use L2TP over IPSec, it uses some proprietary protocol. You can probably re-configure the concentrator to use standard L2TP, but good luck getting the admin to do that ;-)

Boochie · Oct 31, 2003, 01:18 PM

Macs are an endangered species at my work, so I think the Cisco VPN client will have to do.

Originally posted by CatOne:
The default Cisco doesn't use L2TP over IPSec, it uses some proprietary protocol. You can probably re-configure the concentrator to use standard L2TP, but good luck getting the admin to do that ;-)

Some Guy [] · Nov 1, 2003, 04:32 AM

I think you can manually load the CiscoVPN kernel extention (kext) if you don't want to reboot.

-justin

wadesworld · Nov 1, 2003, 08:23 AM

The default Cisco doesn't use L2TP over IPSec, it uses some proprietary protocol.

Well, the protocol used (IPSec) is standard.

However, the problem is, the standards-based IPSec is lacking in some functionality that most companies want (such as the member to authenticate as a member of a a certain group). So, Cisco adds on some proprietary extensions to enable that functionality. Other manufacturers do the same with their implementation.

Wade

Arkham_c · Nov 1, 2003, 09:35 AM

Anyone want to send me a Panther-compatible Cisco VPN client? I have 3.7a and it worked fine with Jag but not in Panther. My company is all Windows so I get no help from the IT department.

Jordan · Nov 1, 2003, 12:24 PM

Originally posted by Arkham_c:
Anyone want to send me a Panther-compatible Cisco VPN client? I have 3.7a and it worked fine with Jag but not in Panther. My company is all Windows so I get no help from the IT department.

Don't know why CISCO is being so protective of the VPN client software. I can understand the server version but not the client.

Don't think it's legal to actually send it to you, however, if you were to go into Yahoo and type "cisco vpn client mac", there will be a number of sites that come up with it to download. A lot of them require you to enter user id and password but there are a couple that don't.

wadesworld · Nov 1, 2003, 01:41 PM

My company is all Windows so I get no help from the IT department.

Just have the person at your company that downloads the Windows client download the Mac client for you. There's no charge for them to do so, so there's no reason why they'd refuse.

Wade

JLL · Nov 2, 2003, 04:25 AM

Originally posted by Arkham_c:
Anyone want to send me a Panther-compatible Cisco VPN client? I have 3.7a and it worked fine with Jag but not in Panther. My company is all Windows so I get no help from the IT department.

You can always get the newest version here:

http://www.it-service.sdu.dk/vis.php?side=84

But if your IT department has access to Ciscos site I can't understand why they're being so snobby.

Arkham_c · Nov 2, 2003, 07:55 AM

Originally posted by wadesworld:
Just have the person at your company that downloads the Windows client download the Mac client for you. There's no charge for them to do so, so there's no reason why they'd refuse.

Wade

My company has 35,000 employees. No Macs. You have to file requests to get anything, and anything outside of the "standard image" is refused. Mac software falls way outside that standard. It's not like there's a guy I can call in the IT department. I'd have to go through filling out paperwork, having it approved by the architecture team, the security team, etc. Big companies suck.

PS. Thanks for the link JLL. That site has what I needed.

Chris in Madison · Nov 2, 2003, 03:55 PM

It's not like there's a guy I can call in the IT department. I'd have to go through filling out paperwork, having it approved by the architecture team, the security team, etc.

I go through the same thing... It's a wonder anyone gets anything done, isn't it?