Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Level 1

69 points

Built-in Cisco VPN on Lion still doesn't work - and now neither does the Cisco Client :-(

Until today, I've always used the Cisco client to setup the VPN - mostly because I could never get the built-in Cisco VPN (IPSec) to work in Snow Leopard. But even that stopped working with Lion (I saw some posts elsewhere that suggest that if you boot the O/S into 32-bits it might still work; others who've had the problem in the past also suggest re-installing the client). But I don't want to do either of these things - after all, what good is Apple's built-in Cisco support if it doesn't work?

Here's what I did so far: I created a VPN (Cisco IPSec) and put in our vpn's server address and my account id. Under "Authentication Settings..." I entered the shared secret and our Group Name. I then tried to connect. It seems to do so as it asks for my account's password (presumably the shared secret for the group has already been trasmitted). But when I give it the password, the VPN quietly disconnects again after a second or so. No warnings, no error messages - nothing!

Can someone here point me to where this network setup tool writes logs that I might look into to get a clue as to what's going on?

Better yet - if you know what (if anything) I'm doing wrong, please tell me? Any help is much appreciated.

Dead in the water,

Tom

Posted on Jul 20, 2011 11:11 AM

Best reply

DrVenture

Level 2

180 points

Posted on Jul 20, 2011 11:45 AM

Tom,

I just tried this on my Lion client. I was able to set up a Cisco IP sec VPN from my Lion client to my Cisco ASA. I used a shared secret and group config, vs a certificate and group config.

Open a console and click on all messages (on the left). Then try to connect with your VPN client. Copy and past from the first message from the racoon service that says IPSec connecting to server X.X.X.X to last message after the VPN connection attempt fails. That might give us a better idea of what is going on.

View in context

32 replies

Oct 23, 2011 8:19 AM in response to tjwolf

See the latest post in this related message thread:

https://discussions.apple.com/thread/3199399

We had the same issue connecting to Cisco VPN after upgrading to Lion on our MBPs. One of the engineers in our group finally figured out a VPN setting that works.

Hope this helps. Good luck.

Dezahp

Level 1

0 points

Dec 14, 2011 2:09 AM in response to DrVenture

DrVenture,

Any chance you can post a sanatized version of your ASA config?

I'm trying to setup an ASA so that the OSX Lion internal Cisco IPSec client will work. I have no problems connecting, but traffic is not going through. Under OSX I can see the routes added for the networks on the ASA but am not able to ping/connect to any servers behind the ASA. I get network unreachable messages from ping and do not see any traffic with debug icmp trace enabled on the ASA. The setup works correctly with a windows pc using the cisco VPN client, so I'm thinking I may have just missed something small that OSX needs setup.

Built-in Cisco VPN on Lion still doesn't work - and now neither does the Cisco Client :-(