[tsheley]

I currently have a G4 Cube attached to a Netgear MR814 router using the Cisco VPN 5000 client to VPN into my work. Everything was working fine until I upgraded to 10.2.5. After that upgrade I have to remove my router and plug my cable modem directly into my Cube and VPN works fine. If I go through my router I can connect to work but loose all internet abilities.

Like I said this same setup worked fine before 10.2.5.

Any ideas?

Thanks

[Loert]

You know, I've just finished battling w/my Netgear router 114 . It just decided to stop working after I upgraded to 10.2.5. In my case, I think it was a coincidence. I had to log into to the crappy router web admin tools and reset everything through the wizard.

I'm not being much help here, but is your regular internet connection up through the router? If not, I would reset the router, spoof the IP of your mac on the router and give it another try. If your VPN was working fine through a router before, you should be OK. I use a VPN though my router all the time w/no issues. Good luck.

Loert

[tsheley]

Thanks for the reply. My internet works great through the router just the VPN is having issues. I finally gave up and talked to the Network Admin at work and he said that I am entitled to a free Linksys Wireless router through work so I am having them order one. I will then try to sell my Netgear.

[ghporter]

Take a look at what changes the upgrade may have made to your personal firewall settings. You may be surprised to find that ports your VPN needs are now blocked in the personal firewall. Also, see if something has changed in your router's settings, as well. Finally, since 10.2.5 updates AirPort software, your AirPort client may be killing your VPN capabilities.

One thing you haven't mentioned trying is connecting your computer through a Cat5 cable and determining whether or not the VPN works. If it DOES, then AirPort's the problem (either client or base). If it DOESN'T, then it's either your firewall or router settings.

[kampl]

With the rolling out of 3k concentrators, since 5k's have been end of lifed, I've noticed problems also. You will have to modify packet filtering settings on your router and/or Mac to get it to work in my experience. The NAT traversal feature may be causing problems for you.

NAT traversal encapsulates the ESP and AH packets into standard UDP or TCP packets depending on the config so that it will work properly with networks that NAT their traffic to public IP addresses from their private addresses (such as this case) over an admin chosen port.

You will probably have to ask what that port is and open it up to and from the concentrator(s) so that things will work properly.

And I could be wrong...............

[ghporter]

That's the problem with VPN-still too new for a lot of people to understand existing standards, and still complex enough that a lot of people can't understand the standards. Lots of trial and error is usually the way one discovers how his or her particular VPN system works, and that's only valid as long as the sysadmin at the other end doesn't change things.

Which brings me to a question I should have asked at the start: Have you asked your sysadmin at work about what issues might be swirling around your particular (your company's) VPN? You should also know that sometimes administrators update server software without remembering to tell users about client updates...forgetful of them, and very frustrating for you.

[kampl]

I agree. VPN technology is still in its infancy of sorts. Client to network VPN is getting easier, but aspects are still daunting from an enduser perspective.

As a grey lining to the cloud of things getting easier, I've noticed that even now there is a drive to support Windows technologies well before anything else is or not at all suppoerted. I've used things like Neoteris proxies to, Cisco VPNs to TLS webservers, and none have fit the bill completely from an enduser perspective.

Anyone want to reverse proxy everything? Oh, wait ActiveX would be a biatch huh?