Q: Post Mavericks (server) upgrade, vpn has stopped working.  Any suggestions?

Funny, I saw the same thing when I repaired the permissions on my disk, a bunch of references to iBook. I wonder what happened there. VPN in Mavericks was working for me outside and inside my network at first.

I see that I can still download ML from the Apps page, is it possible to download that file and use it to install a VM in Parallels? I can't remember if you can download it without it auto-installing or not. I'd rather not mess up Mavericks.

Lobo59

It appears that if I use wi-fi on my internal network I can enable VPN using L2TP, but external access via iPhone on cell network does not work. I do see the racoon logs when I connect with the iPhone externally so something is getting through. See my previous post for logs.

When connecting successfully via wi-fi I see racoon logs followed by some pppd logs whereas connecting externally I only see the racoon retransmits before it times out.

I have UDP ports 500, 1701, and 4500 open on the router mapped to the server.

I'm using OS X Server at home so my needs are not critical and I have alternatives, but I cannot understand why Apple doesn't jump on this if they want to be taken even remotely seriously as a provider of server software. To let this kind of probem drag on is really inexcusable.

> … solution to the L2TP problem: http://support.apple.com/kb/TS5313

"Resolution

You can configure and use PPTP instead. Please note that PPTP requires Directory accounts."

This is *terrible* advice. PPTP has been completely broken for over a year and should be considered unencrypted. <https://www.cloudcracker.com/blog/2012/07/29/cracking-ms-chap-v2/> <https://www.schneier.com/blog/archives/2012/08/breaking_micros.html>

Disable OS X Server's PPTP VPN now, whether PPTP "works" or not.

OpenVPN works fine with Mavericks, and its TLS-based authentication is much more secure than OS X Server's L2TP/Ipsec-PSK. <https://discussions.apple.com/message/23898306#23898306>

"You can configure and use PPTP instead. "

Duuh, one can "configure" PPTP, however it does not work either.

Must be an intern who gave this advice...... ;-(

FYI, the latest Mavericks update (released on 12/17 or 18) replaces older versions of /usr/sbin/racoon. Restoring /sbin/racoon from a pre-Mavericks backup will once again fix the L2TP issue.

Looks like there is a VPN Update for OS X Server that just came out. It requires OS X 10.9.1. Installing it myself now.

Good luck to everyone.

Installed. Failed first few times I tried. Working OK now externally and on the LAN.

I don't know how Apple can think any I.T. admin would specify using OS X Server in a critical business solution when it takes them two months to fix something as important as VPN. This should have been fixed within a day or so of Mav being released October 22nd.

The  VPN Update for OS X Server fixes L2TP for me....

Seems like a solution!!!!  Finally Apple is doing something... but how long has my system been down?? Almost 3 months!!!  I think it is too bad as for such critical flaw in the system. 

http://support.apple.com/kb/HT6080

still not working for me just listening for connections..

I assume it is the case, but can someone confirm that this update is just for the Server version of Mavericks? The same VPN bug is in the non-server version as well. (Thankfully, the ML racoon fix works in the non-server version too).

Installed update and still not able to connect

I am able to connect on the local network but not externally.

That sounds like your router is not set up correctly.

All 3 ports forwarded to my server ip. 1701, 500, 4500. Not sure what else I am missing?