VPN delay

Sorry for my ignorance, but with the Terminal and

"networksetup -setv6off <vpn service name>" where <vpn service name> is the friendly name of your vpn service.

Do you include the quotation marks?

Do you include the < > ?

Thanks much.

Chale Boy wrote:

Doesn't work for me. I was able to turn off IPv6 for the VPN service as you describe above but I still have to wait till 30 seconds goes by.

Same for me. I was able to turn off IPv6, but still have the 30 sec. delay.

Aviavi,

No to both of your questions...

The quickest way to find what is holding everything up on your end is to follow dwbrecovery's advice to view the ppp.log file.

You can also get live get monitoring of that same file by opening a terminal and running:

"tail -f /var/log/ppp.log"

This will allow you to watch the vpn log as entries are written to it. Once you have that Terminal window open and running the tail command, initiate a VPN session and watch the Terminal window. You can see exactly what is going on during that 30 second delay.

I fixed the problem by going to Network Preferences>Advanced>Options and checking "Send all traffic over VPN connection."

I don't know if it was simply checking this box, or a combination of performing the Terminal command that LupotheButcher described. But the delay is gone!

Thanks all!

So, turning off IPv6 worked for me on my MacBook Air when I was running Mavericks. However, I upgraded to Yosemite yesterday, and the 30 second delay reappeared. IPv6 was still turned off, but I explicitly turned it off again. The problem sadly did to go away.

Here's the log The problem indeeds to be the IPV6CP time out, but why didn't turning

Mon Nov 17 18:45:03 2014 : IPSec connection started

Mon Nov 17 18:45:05 2014 : IPSec connection established

Mon Nov 17 18:45:05 2014 : L2TP connection established.

Mon Nov 17 18:45:05 2014 : L2TP set port-mapping for en0, interface: 4, protocol: 0, privatePort: 0

Mon Nov 17 18:45:05 2014 : Using interface ppp0

Mon Nov 17 18:45:05 2014 : Connect: ppp0 <--> socket[34:18]

Mon Nov 17 18:45:05 2014 : L2TP port-mapping for en0, interfaceIndex: 0, Protocol: None, Private Port: 0, Public Address: 18790ea6, Public Port: 0, TTL: 0.

Mon Nov 17 18:45:05 2014 : L2TP port-mapping for en0 inconsistent. is Connected: 1, Previous interface: 4, Current interface 0

Mon Nov 17 18:45:05 2014 : L2TP port-mapping for en0 initialized. is Connected: 1, Previous publicAddress: (0), Current publicAddress 18790ea6

Mon Nov 17 18:45:05 2014 : L2TP port-mapping for en0 fully initialized. Flagging up

Mon Nov 17 18:45:08 2014 : CHAP authentication succeeded

Mon Nov 17 18:45:08 2014 : local IP address 192.168.168.177

Mon Nov 17 18:45:08 2014 : remote IP address 192.168.168.168

Mon Nov 17 18:45:08 2014 : primary DNS address 10.10.100.32

Mon Nov 17 18:45:08 2014 : l2tp_wait_input: Address added. previous interface setting (name: en0, address: 10.0.1.5), current interface setting (name: ppp0, family: PPP, address: 192.168.168.177, subnet: 255.255.255.0, destination: 192.168.168.168).

Mon Nov 17 18:45:38 2014 : IPV6CP: timeout sending Config-Requests

Mon Nov 17 18:45:38 2014 : Committed PPP store on install command

Mon Nov 17 18:45:40 2014 : L2TP port-mapping update for en0 ignored: VPN is the Primary interface. Public Address: 0, Protocol: None, Private Port: 0, Public Port: 0

Mon Nov 17 18:45:40 2014 : L2TP clearing port-mapping for en0

It's an IPV6 issue, if you go to console and open your ppp log you will notice an IPv6 query every 3 seconds until it times out. You need to tell the ppp daemon to not try IPv6. To do this create a text file called options.txt with the following string: ipv6cp-max-configure 0 Save that file to the etc/ppp directory. You need to be root or sudo cp it via terminal. Reboot and your problem should go away.

Try adding the options file as described below

This has all been seriously helpful everyone. I feel like I am narrowing it down. Ive got an office of ~50 people who have been struggling with quick file access remotely. I'm using a Sonicwall NSA2400 on the backend and am trying to migrate everyone over from the 'not fast enough' SSL VPn connection to this L2TP over IPSEC setup using the built in L2TP VPN client on Yosemite. It works great, except for this nonsense 30 second delay.

I disabled IPV6 on my VPN interface (called VPN) using; networksetup -setv6off VPN

Then I edited the config.txt file in /etc/ppp to have ipv6cp-max-configure 0 as the only content in it.

But I am STILL getting a 30 second delay, except I don't see those IPV6 queries for the last 20 seconds like I used to, now it looks like it is an sent [ACSCP ConfReq id=0x1 <route vers 16777216> <domain vers 16777216>] error. So I am at a loss. Has anyone seen this before?

Here is a copy of my complete Verbose Log for PPP....

Thanks in advance.

Thu Apr 9 14:21:12 2015 : publish_entry SCDSet() failed: Success!

Thu Apr 9 14:21:12 2015 : publish_entry SCDSet() failed: Success!

Thu Apr 9 14:21:12 2015 : l2tp_get_router_address

Thu Apr 9 14:21:12 2015 : l2tp_get_router_address 172.20.10.1 from dict 1

Thu Apr 9 14:21:13 2015 : L2TP connecting to server 'dtfw.digital-telepathy.com' (68.224.173.120)...

Thu Apr 9 14:21:13 2015 : IPSec connection started

Thu Apr 9 14:21:13 2015 : IPSec phase 1 client started

Thu Apr 9 14:21:13 2015 : IPSec phase 1 server replied

Thu Apr 9 14:21:14 2015 : IPSec phase 2 started

Thu Apr 9 14:21:14 2015 : IPSec phase 2 established

Thu Apr 9 14:21:14 2015 : IPSec connection established

Thu Apr 9 14:21:14 2015 : L2TP sent SCCRQ

Thu Apr 9 14:21:14 2015 : L2TP received SCCRP

Thu Apr 9 14:21:14 2015 : L2TP sent SCCCN

Thu Apr 9 14:21:14 2015 : L2TP sent ICRQ

Thu Apr 9 14:21:14 2015 : L2TP received ICRP

Thu Apr 9 14:21:14 2015 : L2TP sent ICCN

Thu Apr 9 14:21:14 2015 : L2TP connection established.

Thu Apr 9 14:21:14 2015 : L2TP set port-mapping for en1, interface: 4, protocol: 0, privatePort: 0

Thu Apr 9 14:21:14 2015 : using link 0

Thu Apr 9 14:21:14 2015 : Using interface ppp0

Thu Apr 9 14:21:14 2015 : Connect: ppp0 <--> socket[34:18]

Thu Apr 9 14:21:14 2015 : sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x5218d915> <pcomp> <accomp>]

Thu Apr 9 14:21:14 2015 : rcvd [LCP ConfReq id=0x1 <mru 1394> <auth chap MS-v2> <magic 0xab416435>]

Thu Apr 9 14:21:14 2015 : lcp_reqci: returning CONFACK.

Thu Apr 9 14:21:14 2015 : sent [LCP ConfAck id=0x1 <mru 1394> <auth chap MS-v2> <magic 0xab416435>]

Thu Apr 9 14:21:14 2015 : rcvd [LCP ConfReq id=0x2 <mru 1394> <auth chap MS-v2> <magic 0xab416435>]

Thu Apr 9 14:21:14 2015 : lcp_reqci: returning CONFACK.

Thu Apr 9 14:21:14 2015 : sent [LCP ConfAck id=0x2 <mru 1394> <auth chap MS-v2> <magic 0xab416435>]

Thu Apr 9 14:21:15 2015 : rcvd [LCP ConfReq id=0x3 <mru 1394> <auth chap MS-v2> <magic 0xab416435>]

Thu Apr 9 14:21:15 2015 : lcp_reqci: returning CONFACK.

Thu Apr 9 14:21:15 2015 : sent [LCP ConfAck id=0x3 <mru 1394> <auth chap MS-v2> <magic 0xab416435>]

Thu Apr 9 14:21:16 2015 : rcvd [LCP ConfReq id=0x4 <mru 1394> <auth chap MS-v2> <magic 0xab416435>]

Thu Apr 9 14:21:16 2015 : lcp_reqci: returning CONFACK.

Thu Apr 9 14:21:16 2015 : sent [LCP ConfAck id=0x4 <mru 1394> <auth chap MS-v2> <magic 0xab416435>]

Thu Apr 9 14:21:17 2015 : sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x5218d915> <pcomp> <accomp>]

Thu Apr 9 14:21:17 2015 : rcvd [LCP ConfReq id=0x5 <mru 1394> <auth chap MS-v2> <magic 0xab416435>]

Thu Apr 9 14:21:17 2015 : lcp_reqci: returning CONFACK.

Thu Apr 9 14:21:17 2015 : sent [LCP ConfAck id=0x5 <mru 1394> <auth chap MS-v2> <magic 0xab416435>]

Thu Apr 9 14:21:17 2015 : rcvd [LCP ConfRej id=0x1 <asyncmap 0x0> <pcomp>]

Thu Apr 9 14:21:17 2015 : sent [LCP ConfReq id=0x2 <magic 0x5218d915> <accomp>]

Thu Apr 9 14:21:17 2015 : rcvd [LCP ConfAck id=0x2 <magic 0x5218d915> <accomp>]

Thu Apr 9 14:21:17 2015 : sent [LCP EchoReq id=0x0 magic=0x5218d915]

Thu Apr 9 14:21:17 2015 : rcvd [CHAP Challenge id=0x1 <4a0fbdd6af4a0410088066f3563e713e>, name = "SonicWALL"]

Thu Apr 9 14:21:17 2015 : sent [CHAP Response id=0x1 <f6b1130965b4d11024e32744aa17c1ea00000000000000003ad102742f8a96e21881b22211ccd9 c45eaa2711a37600b100>, name = "rodger"]

Thu Apr 9 14:21:17 2015 : rcvd [LCP EchoRep id=0x0 magic=0xab416435]

Thu Apr 9 14:21:17 2015 : rcvd [CHAP Success id=0x1 "S=59A2D20D74A81871463320E81DE8F6B76DA54473"]

Thu Apr 9 14:21:17 2015 : sent [IPCP ConfReq id=0x1 <addr 0.0.0.0> <ms-dns1 0.0.0.0> <ms-dns3 0.0.0.0>]

Thu Apr 9 14:21:17 2015 : sent [IPV6CP ConfReq id=0x1 <addr fe80::3e07:54ff:fe2a:bf13>]

Thu Apr 9 14:21:17 2015 : sent [ACSCP ConfReq id=0x1 <route vers 16777216> <domain vers 16777216>]

Thu Apr 9 14:21:17 2015 : rcvd [IPCP ConfReq id=0x1 <addr 192.168.0.2>]

Thu Apr 9 14:21:17 2015 : ipcp: returning Configure-ACK

Thu Apr 9 14:21:17 2015 : sent [IPCP ConfAck id=0x1 <addr 192.168.0.2>]

Thu Apr 9 14:21:17 2015 : rcvd [IPCP ConfNak id=0x1 <addr 192.168.0.33> <ms-dns1 192.168.0.1> <ms-dns3 4.2.2.2>]

Thu Apr 9 14:21:17 2015 : sent [IPCP ConfReq id=0x2 <addr 192.168.0.33> <ms-dns1 192.168.0.1> <ms-dns3 4.2.2.2>]

Thu Apr 9 14:21:18 2015 : rcvd [IPCP ConfReq id=0x2 <addr 192.168.0.2>]

Thu Apr 9 14:21:18 2015 : ipcp: returning Configure-ACK

Thu Apr 9 14:21:18 2015 : sent [IPCP ConfAck id=0x2 <addr 192.168.0.2>]

Thu Apr 9 14:21:18 2015 : rcvd [IPCP ConfAck id=0x2 <addr 192.168.0.33> <ms-dns1 192.168.0.1> <ms-dns3 4.2.2.2>]

Thu Apr 9 14:21:18 2015 : ipcp: up

Thu Apr 9 14:21:18 2015 : local IP address 192.168.0.33

Thu Apr 9 14:21:18 2015 : remote IP address 192.168.0.2

Thu Apr 9 14:21:18 2015 : primary DNS address 192.168.0.1

Thu Apr 9 14:21:18 2015 : secondary DNS address 4.2.2.2

Thu Apr 9 14:21:18 2015 : sent [IP data <src addr 192.168.0.33> <dst addr 255.255.255.255> <BOOTP Request> <type INFORM> <client id 0x08000000010000> <parameters = 0x6 0x2c 0x2b 0x1 0xf9 0xf>]

Thu Apr 9 14:21:18 2015 : Received acsp/dhcp dictionaries

Thu Apr 9 14:21:18 2015 : Received acsp/dhcp dictionaries

Thu Apr 9 14:21:18 2015 : Script /etc/ppp/ip-up started (pid 646)

Thu Apr 9 14:21:18 2015 : l2tp_wait_input: Address added. previous interface setting (name: en1, address: 172.20.10.9), current interface setting (name: ppp0, family: PPP, address: 192.168.0.33, subnet: 255.255.255.0, destination: 192.168.0.2).

Thu Apr 9 14:21:18 2015 : Script /etc/ppp/ip-up finished (pid 646), status = 0x1

Thu Apr 9 14:21:18 2015 : L2TP port-mapping for en1, interfaceIndex: 0, Protocol: None, Private Port: 0, Public Address: 0, Public Port: 0, TTL: 0.

Thu Apr 9 14:21:18 2015 : L2TP port-mapping for en1 inconsistent. is Connected: 1, Previous interface: 4, Current interface 0

Thu Apr 9 14:21:20 2015 : IPV6CP: timeout sending Config-Requests

Thu Apr 9 14:21:20 2015 : sent [ACSCP ConfReq id=0x1 <route vers 16777216> <domain vers 16777216>]

Thu Apr 9 14:21:21 2015 : sent [IP data <src addr 192.168.0.33> <dst addr 255.255.255.255> <BOOTP Request> <type INFORM> <client id 0x08000000010000> <parameters = 0x6 0x2c 0x2b 0x1 0xf9 0xf>]

Thu Apr 9 14:21:23 2015 : sent [ACSCP ConfReq id=0x1 <route vers 16777216> <domain vers 16777216>]

Thu Apr 9 14:21:24 2015 : sent [IP data <src addr 192.168.0.33> <dst addr 255.255.255.255> <BOOTP Request> <type INFORM> <client id 0x08000000010000> <parameters = 0x6 0x2c 0x2b 0x1 0xf9 0xf>]

Thu Apr 9 14:21:24 2015 : Received acsp/dhcp dictionaries

Thu Apr 9 14:21:26 2015 : sent [ACSCP ConfReq id=0x1 <route vers 16777216> <domain vers 16777216>]

Thu Apr 9 14:21:27 2015 : sent [IP data <src addr 192.168.0.33> <dst addr 255.255.255.255> <BOOTP Request> <type INFORM> <client id 0x08000000010000> <parameters = 0x6 0x2c 0x2b 0x1 0xf9 0xf>]

Thu Apr 9 14:21:29 2015 : sent [ACSCP ConfReq id=0x1 <route vers 16777216> <domain vers 16777216>]

Thu Apr 9 14:21:30 2015 : sent [IP data <src addr 192.168.0.33> <dst addr 255.255.255.255> <BOOTP Request> <type INFORM> <client id 0x08000000010000> <parameters = 0x6 0x2c 0x2b 0x1 0xf9 0xf>]

Thu Apr 9 14:21:32 2015 : sent [ACSCP ConfReq id=0x1 <route vers 16777216> <domain vers 16777216>]

Thu Apr 9 14:21:33 2015 : No DHCP server replied

Thu Apr 9 14:21:35 2015 : sent [ACSCP ConfReq id=0x1 <route vers 16777216> <domain vers 16777216>]

Thu Apr 9 14:21:38 2015 : sent [ACSCP ConfReq id=0x1 <route vers 16777216> <domain vers 16777216>]

Thu Apr 9 14:21:41 2015 : sent [ACSCP ConfReq id=0x1 <route vers 16777216> <domain vers 16777216>]

Thu Apr 9 14:21:44 2015 : sent [ACSCP ConfReq id=0x1 <route vers 16777216> <domain vers 16777216>]

Thu Apr 9 14:21:47 2015 : acscp: timeout sending Config-Requests

Thu Apr 9 14:21:47 2015 : Received protocol dictionaries

Thu Apr 9 14:21:47 2015 : Committed PPP store on install command

I found that adding the line:

ipv6cp-max-configure 0

to /etc/ppp/options

Was the solution that worked for me. The connection initializes almost instantly now.

In addition, I reenabled IPv6 on all of my connections and everything continued to work just fine.

One final note: the /etc/ppp/options file did not exist on my system. I created it using 'vi'. I did need to enable sudo to be able to write the file into that directory.

You're a life saver!! This did it for me!