Cisco VPN no longer working after firmware update

Question

Level 2

204 points

Cisco VPN no longer working after firmware update

I have been using the Cisco VPN network connection to access work; after the recent update, both my Macs stopped working -- no changes have been made.

Is this a known bug? I looked at the settings, verified everything with no luck.

Thanks.

Mac OS X (10.6.5)

Posted on Dec 21, 2010 9:55 AM

Reply

Answer 1

Dec 21, 2010 10:00 AM in response to Forrest

Have you tried reinstalling it?

Reply

Answer 2

Forrest Author

Level 2

204 points

Dec 21, 2010 10:08 AM in response to Templeton Peck

Reinstalling? As in, the original firmware? No, I did not wipe it out... except the Time Machine portion of it, which is now working. The settings appear to be fine.

Reply

Answer 3

Dec 21, 2010 10:09 AM in response to Forrest

No... the cisco client

Reply

Answer 4

Forrest Author

Level 2

204 points

Dec 21, 2010 10:12 AM in response to Templeton Peck

I'm not using that, I'm using the native OS X VPN/Cisco network connection, which was working fine... until recent updates.

Reply

Answer 5

Forrest Author

Level 2

204 points

Dec 21, 2010 7:29 PM in response to Forrest

I've tested this with a co-worker. We are able to connect to Cisco VPN via the Cisco client, but no longer with the OS X network connection.

This points to a Mac OS X bug that was introduced with recent patches.

Reply

Answer 6

Forrest Author

Level 2

204 points

Dec 22, 2010 7:17 PM in response to Forrest

An update to this.

I spoke with AppleCare today - they suggested I experiment by creating a new Location and setting it up again. I did this, and I get "VPN Secret Incorrect" (or something similar). I know the secret is correct.

What I suspect may have happened is the Encryption/IKE stuff changed with a patch... I don't see anywhere I can view or change these settings. It could be that it assumes certain proposals will be available, when they aren't?

Reply

Answer 7

Dec 28, 2010 8:09 AM in response to Forrest

I too recently started having issues with connecting to my Cisco VPN via the Airport Extreme since the recent firmware updates. I tried to put in the old firmware version but the issues still remained. Bypassing the router solves my problem but I obviously don't want to do that.

Reply

Answer 8

Forrest Author

Level 2

204 points

Dec 28, 2010 8:43 AM in response to plethera1

This is interesting to note. Especially that you attempted to revert back to a previous version and it still had problems. What I suspect is happening is information is being written to NVRAM or elsewhere that isn't being included in a downgrade... something that affects the ability for IPSec to work correctly (IKE proposals, etc).

I'm just guessing at this point.

I don't want to take my system outside of the time capsule either. But, I have to use my corporate VPN, I need it to work.

Reply

Answer 9

Dec 28, 2010 9:28 AM in response to Forrest

I am having the same problem since updating the Airport Extreme with the latest firmware patch. As I have field personnel who need this connection.

Reply

Answer 10

Forrest Author

Level 2

204 points

Dec 28, 2010 12:57 PM in response to jr azzarelli

I was reading through the patch document at:

http://support.apple.com/kb/DL1106

which states, among fixes:

* Disables TKIP security with 802.11n rates per the Wi-Fi Alliance specifications

but I don't see how this could possibly affect VPN.

in the mean time, I'm trying to figure out how to submit a bug report regarding this patch.

Reply

Answer 11

baltwo

Level 9

62,386 points

Dec 28, 2010 1:30 PM in response to Forrest

See http://discussions.apple.com/thread.jspa?messageID=12800407&tstart=0. If you want to report this issue to Apple's engineering, send a bug report or an enhancement request via its Bug Reporter system. To do this, join the Mac Developer Program—it's free and available for all Mac users and gets you a look at some development software. Since you already have an Apple username/ID, use that. Once a member, go to Apple BugReporter and file your bug report or enhancement request. The nice thing with this procedure is that you get a response and a follow-up number; thus, starting a dialog with engineering.

Reply

Answer 12

Forrest Author

Level 2

204 points

Dec 29, 2010 11:01 AM in response to baltwo

I've done some more testing which includes my Macbook Pro (Intel). Today, I am able to connect via the VPN/Apple connection - where I wasn't before.

I still cannot connect via the new Mac Pro, and this is very confusing.

I want to do a test. Is there a way I can "import" the VPN settings from my Macbook Pro to my Mac Pro? This may help debug this further. It would need to include my shared secret, etc.

Reply

Answer 13

baltwo

Level 9

62,386 points

Dec 29, 2010 11:17 AM in response to Forrest

I don't have a clue, since I don't use VPN, and only responded to your query WRT reporting bugs to Apple.

Reply

Answer 14

Jan 2, 2011 10:44 AM in response to Forrest

I have the exact same issue and have not been able to solve the problem of the built in VPN suddenly stopped working. It comes up with the error "VPN server did not respond". I tried the following:

1. Thinking this may be a routing issue, I tried connecting directly to the cable modem, bypassing the router. Problem still occurs.
2. Installed the Cisco VPN client 4.8 and the Cisco client connnects, however, the built in client still has the problem. This is a workaround, but does not solve the problem.
3. Reinstalled Snow Leopard. Problem still occurs.

Reply

Answer 15

Forrest Author

Level 2

204 points

Jan 2, 2011 10:51 AM in response to frogger2020

I contacted AppleCare and explained the issue.

I was told that the Cisco VPN Connection is not supported.

Um, okay.

Reply