Setup VPN works fine in iphone, ipad and Mac, but not XP and win7. How to resolve this problem?
the VPN is default settings: L2TP, easy connect with Apple products. However, XP and win7 both claim to support L2TP, but give me "Err 809".
If i cannot resolve this problems, the members who use PC cannot access my server.
Mac mini, Mac OS X (10.7.1)
Hi, the vpn server in os x lion works with win7. Make sure that you use the users short names for authentication.
I done this already but not work
Found a fix yet? I am having the same issue. All macs and ipad connect to vpn fine but cannot get a single windows machine to connect. XP or Win 7.
Is your server directly connectet to the internet, with a public ip?
By default windows 7 machines do not accept connections to a VPN server that is connectet trough a (nat) router with the internet. To get it to work add the follwoing 32 Bit DWord to the Windows 7 registry:
Only for windows 7:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PolicyAgent
Create new 32Bit Dword:
AssumeUDPEncapsulationContextOnSendRule
Value:
2
Only for windows XP:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\IPSec
Create new 32Bit Dword:
AssumeUDPEncapsulationContextOnSendRule
Value:
2
After that, reboot the windows machines. Make sure, your VPN server accept incoming connections on port:
UDP 500 - VPN-L2TP: ISAKMP/IKE
UDP 1701 - VPN-L2TP: Layer 2
UDP 4500 - Nat traversal
yes..i have the same problem. no windows flavour was ever able to connect. i have enabled pptp, because this is supposed to be the win standart protocol, but to no avail.
pptp, which worked fine in sls does also not work with mac clients.
i still refuse to resort to changing win reg.exe information. it should be possible tha lion server, even behind a airport router serves vpn to win clients.
has anyone this resoled?
yours pierre
Do you have your router passing the ports through and did you select SMB file types under setting in sharing?
Jt, thank you for the reply
Yes, I have an AEBS and it has all the ports for VPN open.
And yes.. inside my network we have WIN machines connecting just fine to the server.
yours
PIerre
I can confirm that changes to Windows Key Registry is the only way to allow Windows Clients to connect over NAT. This is Microsoft's intention. This article explains the technical and reiterates the solution.
NAT Traversal (NAT-T) Security Issues
Microsoft's support site also has this explaination.
Brian
Setup VPN works fine in iphone, ipad and Mac, but not XP and win7.
