Welcome to the MacNN Forums.

Prijker · Sep 23, 2002, 12:02 PM

Hi

Does VPN really works in Jaguar 10.2.1?

Here's why i ask:

My University now has a VPN server based on Windows 2000

So now i have Jaguar i decided to give it a try. I've got login/password, and the IP of my machine at University.

I opened a new VPN connection service in Internet Connect app, and filled all required fields.

When i log in, everything is lightning fast: i get connected to the University VPN in 3 secs.

The problem starts when i try to get to my remote machine. When i type it's IP in the "Connect to Server" menu in the Finder, aftp://XXX.XXX.XXX.XXX, i always get a (-36) error.

I must add i can perfectly connect to the same machine when i use Windows 2000 built-in VPN in Virtual PC. No error.

Can anyone explain me what this -36 error means?

Should i stop worrying and only use Win2000 in VPC?

Vic

Evinyatar · Sep 23, 2002, 12:16 PM

I think you mean afp://xxx.xxx.xxx.xxx (note the lack of a t in afp

)

Prijker · Sep 23, 2002, 12:26 PM

yes, i mean afp. sorry

Here is part of my log, if that can help:

Mon Sep 23 17:17:37 2002 : PPTP connecting to server (xxx.xxx.xxx.xxx)...
Mon Sep 23 17:17:37 2002 : PPTP connection established.
Mon Sep 23 17:17:37 2002 : Using interface ppp0
Mon Sep 23 17:17:37 2002 : Connect: ppp0 <--> socket[34:17]
Mon Sep 23 17:17:38 2002 : Remote message: S=25718A135B562F072B329DD358D3A22AC6575615
Mon Sep 23 17:17:38 2002 : MPPE 128 bit, stateless compression enabled
Mon Sep 23 17:17:38 2002 : local IP address xxx.xxx.xxx.xxx
Mon Sep 23 17:17:38 2002 : remote IP address xxx.xxx.xxx.xxx
Mon Sep 23 17:17:38 2002 : primary DNS address xxx.xxx.xxx.xxx

From here on, i'm connected. But when i try to open my remote machine, the dreaded -36 error pops-up

I have a modem cable connection, if that matters.

piracy · Sep 23, 2002, 03:47 PM

You forgot to mention if you can connect to anything else. Can you still connect to web pages? Other internet resources?

Prijker · Sep 23, 2002, 04:29 PM

now you mention it, i just verified and... i can't connect to anything else (i tried Mozilla and Explorer) when my VPN connection is active. As soon as i disconnect VPN, i have my usual internet connections back.

So, where are we, now?

voodoo · Sep 23, 2002, 04:51 PM

I am also getting an "error -36" when trying to connect to my university's UNIX servers from home through a cable modem using VPN.

I have full access to the rest of the internet and I can access said servers through the Terminal using ssh, I just can't use "Connect to Server" from the Finder.

Always an "error -36".

Anyone else?

iAdmin · Sep 24, 2002, 01:42 AM

A VPN is a virtual private network that uses tunneling and authentication protocals like IPSEC, encryption like MDA5 and so forth to encrypt a secure connection through the internet. From what I understand, IPSEC is not yet available on OS X. If it is, I don't know where the documentation on this is? And BTW, I use a hardware firewall that does VPN tunnelling. As for consumer OS, Win 2K and XP does IPSEC VPN.

Sounds like you just have some sort of remote access but it does not sound like a VPN in the traditional sense.

besson3c · Sep 24, 2002, 08:23 AM

Try this:

Within 2 minutes of your connection, drop down into your terminal and type:

sudo route delete *VPN Server IP Address*

It will then ask you for your admin password.

This is a trick that works with our VPN server here at where I am.... This is only necessary for our wireless connections, not ethernet PPTP.

besson3c · Sep 24, 2002, 08:26 AM

A VPN is a virtual private network that uses tunneling and authentication protocals like IPSEC, encryption like MDA5 and so forth to encrypt a secure connection through the internet. From what I understand, IPSEC is not yet available on OS X. If it is, I don't know where the documentation on this is? And BTW, I use a hardware firewall that does VPN tunnelling. As for consumer OS, Win 2K and XP does IPSEC VPN.

Are you sure that Windows uses IPSec? If so, how do you do this? I thought Windows just supported the insecure PPTP like Jaguar does...

IPSec are just a set of libraries, which actually are available in 10.2, apparently.

Prijker · Sep 24, 2002, 03:48 PM

i wish i could have some concrete help, please?

vic.

voodoo · Sep 24, 2002, 05:10 PM

Like, what error -36 is?

What does it mean?

Etc.

Prijker · Sep 25, 2002, 10:04 AM

I now have the complete solution, thanks to nobody here

Found it myself, and sharing it.

The problem is i was using the wrong protocol (afp)

But acording to this:

http://docs.info.apple.com/article.html?artnum=106471

when you connect to a Windows File Sharing (SMB) system, you must connect with this kind of syntax:

smb://xxx.xxx.xxx.xxx

and then the VPN server just opens in the Finder, after asking l/p!

Clean and magic!

Again, thanks to nobody for your help

vic

wingdo · Sep 26, 2002, 01:28 PM

Originally posted by Prijker:
I now have the complete solution, thanks to nobody here

Found it myself, and sharing it.

The problem is i was using the wrong protocol (afp)

But acording to this:

http://docs.info.apple.com/article.html?artnum=106471

when you connect to a Windows File Sharing (SMB) system, you must connect with this kind of syntax:

smb://xxx.xxx.xxx.xxx

and then the VPN server just opens in the Finder, after asking l/p!

Clean and magic!

Again, thanks to nobody for your help

vic

That doesn't explain why you couldn't access web pages through IE while connected to the VPN. Can you browse the web now?

besson3c · Sep 26, 2002, 01:39 PM

I now have the complete solution, thanks to nobody here

Found it myself, and sharing it.

The problem is i was using the wrong protocol (afp)

But acording to this:

http://docs.info.apple.com/article.html?artnum=106471

when you connect to a Windows File Sharing (SMB) system, you must connect with this kind of syntax:

smb://xxx.xxx.xxx.xxx

and then the VPN server just opens in the Finder, after asking l/p!

Clean and magic!

Again, thanks to nobody for your help

You aren't connecting to a VPN server when you connect via smb:// you are connecting to a Samba share. I think you have some of the terms confused.

markphip · Sep 26, 2002, 01:51 PM

Originally posted by wingdo:

That doesn't explain why you couldn't access web pages through IE while connected to the VPN. Can you browse the web now?

Actually, it is quite common to not be able to access the web while connected to a VPN. In order to do so, it requires one of the following:

1) The VPN has to be configured for "split-tunneling". This is something in the VPN that basically says route this traffic over the VPN, and the rest over the Internet. I believe this is controlled by the VPN server. I don't think PPTP supports this at all.

2) The VPN itself has to let you connect to the Internet and then route the results back to you via the VPN. Most VPN's do not allow this because they do not want that traffic using the limited VPN resources.

Hope this helps,

Mark

Prijker · Sep 26, 2002, 03:26 PM

besson3c claimed:

You aren't connecting to a VPN server when you connect via smb:// you are connecting to a Samba share. I think you have some of the terms confused.

I am connecting from home to a Windows 2000 network, at the university.
To connect, i must use the VPN potocol.
Once the VPN tunnel is opened, i must use the smb:// command to reach my remote machine.

What else didn't you understand?

besson3c · Sep 26, 2002, 03:36 PM

when you connect to a Windows File Sharing (SMB) system, you must connect with this kind of syntax:

smb://xxx.xxx.xxx.xxx

and then the VPN server just opens in the Finder, after asking l/p!

Was what I didn't understand, since the VPN server does not open in the Finder, but I now understand what you meant...

Glad you found a solution!