OS X Server VPN not connecting?

Question

OS X Server VPN not connecting?

I have been trying to connect to my OS X Server VPN on my Mac and my iPhone multiple times through L2TP and PPTP. However, the connection never works. My iPhone states that "The L2TP-VPN server did not respond. Try reconnecting. If the problems continues, verify your settings and contact your Adinistrator." I double and triple the settings on both my Mac and my iPhone and they appear to be fine. Is there any way I could get this to work again??

The VPN service logs show this.

#Start-Date: 2014-05-08 22:43:13 PDT

#Fields: date time s-comment

2014-05-08 22:43:13 PDT Loading plugin /System/Library/Extensions/PPTP.ppp

2014-05-08 22:43:13 PDT Loading plugin /System/Library/Extensions/L2TP.ppp

2014-05-08 22:43:14 PDT Listening for connections...

2014-05-08 22:43:15 PDT Listening for connections...

2014-05-09 18:07:33 PDT Incoming call... Address given to client = 192.168.1.224

2014-05-09 18:07:33 PDT --> Client with address = 192.168.1.224 has hungup

2014-05-10 13:45:24 PDT Incoming call... Address given to client = 192.168.1.200

2014-05-10 13:45:24 PDT --> Client with address = 192.168.1.200 has hungup

2014-05-10 13:45:26 PDT Incoming call... Address given to client = 192.168.1.201

2014-05-10 13:45:26 PDT --> Client with address = 192.168.1.201 has hungup

2014-05-10 13:45:30 PDT Incoming call... Address given to client = 192.168.1.202

2014-05-10 13:45:30 PDT --> Client with address = 192.168.1.202 has hungup

2014-05-10 13:45:34 PDT Incoming call... Address given to client = 192.168.1.203

2014-05-10 13:45:34 PDT --> Client with address = 192.168.1.203 has hungup

2014-05-10 13:45:38 PDT Incoming call... Address given to client = 192.168.1.204

2014-05-10 13:45:38 PDT --> Client with address = 192.168.1.204 has hungup

2014-05-10 13:45:42 PDT Incoming call... Address given to client = 192.168.1.205

2014-05-10 13:45:42 PDT --> Client with address = 192.168.1.205 has hungup

Any help would be greatly appreciated!!!!

Mac mini, OS X Mavericks (10.9.2), Running Mac Server

Posted on May 10, 2014 1:49 PM

Reply

Answer 1

Linc Davis

Level 10

209,739 points

May 10, 2014 3:38 PM in response to xoxorockoutloud123

What's in /var/log/ppp.log on the client?

Reply

Answer 2

May 10, 2014 9:23 PM in response to Linc Davis

My last attempted connect showed this in the ppp.log

Sat May 10 21:17:21 2014 : publish_entry SCDSet() failed: Success!

Sat May 10 21:17:21 2014 : L2TP connecting to server 'felixjen.com' (75.83.255.61)...

Sat May 10 21:17:21 2014 : IPSec connection started

Sat May 10 21:17:22 2014 : IPSec connection established

Sat May 10 21:17:42 2014 : L2TP cannot connect to the server

Here is a verbose log

Sat May 10 21:20:44 2014 : publish_entry SCDSet() failed: Success!

Sat May 10 21:20:44 2014 : L2TP connecting to server 'felixjen.com' (75.83.255.61)...

Sat May 10 21:20:44 2014 : IPSec connection started

Sat May 10 21:20:44 2014 : IPSec phase 1 client started

Sat May 10 21:20:44 2014 : IPSec phase 1 server replied

Sat May 10 21:20:45 2014 : IPSec phase 2 started

Sat May 10 21:20:45 2014 : IPSec phase 2 established

Sat May 10 21:20:45 2014 : IPSec connection established

Sat May 10 21:20:45 2014 : L2TP sent SCCRQ

Sat May 10 21:21:05 2014 : L2TP cannot connect to the server

Reply

Answer 3

jepping

Level 3

785 points

May 11, 2014 3:46 AM in response to xoxorockoutloud123

I've had success when everything was setup correctly, like port forwarding and all, when I changed the VPN settings for IP addresses for L2TP and PPTP and then the Server.app needed to restart the VPN service.

Suddenly the VPN service started working like it should, when before that "restart of the service" it kept denying connections even though everything was setup exactly like it should.

Perhaps worth a try?

Goodluck!

Jeffrey

Reply

Answer 4

Linc Davis

Level 10

209,739 points

May 11, 2014 5:41 AM in response to xoxorockoutloud123

1. If Internet Sharing, "Back to My Mac," or any kind of firewall is active on the server, deactivate it and try again.

2. Can you connect from inside the local network?

Reply

Answer 5

May 11, 2014 8:44 AM in response to Linc Davis

Ok I just checked it and none of them were activated. I tried it from my local me tower and it also says it's not responding. I just tried restarting it but no luck.

Btw. Sorry I accidentally marked my own reply as solving my question. Stupid iphone touchscreen!

Reply

Answer 6

Linc Davis

Level 10

209,739 points

May 11, 2014 3:56 PM in response to xoxorockoutloud123

Please post the contents of this file:

/Library/Preferences/SystemConfiguration/com.apple.RemoteAccessServers.plist

Anonymize any private information.

Reply

Answer 7

May 11, 2014 5:01 PM in response to Linc Davis

Assuming that it's on the server side

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
          <key>ActiveServers</key>
          <array>
                    <string>com.apple.ppp.pptp</string>
                    <string>com.apple.ppp.l2tp</string>
          </array>
          <key>Globals</key>
          <dict>
                    <key>PSKeyAccount</key>
                    <string>vpn_7f42cf7a6bec</string>
                    <key>PSKeyAccounts</key>
                    <dict>
                              <key>/LDAPv3/127.0.0.1</key>
                              <string>vpn_7f42cf7a6bec</string>
                    </dict>
          </dict>
          <key>Servers</key>
          <dict>
                    <key>com.apple.ppp.l2tp</key>
                    <dict>
                              <key>DNS</key>
                              <dict>
                                        <key>OfferedSearchDomains</key>
                                        <array>
                                                  <string>socal.rr.com</string>
                                        </array>
                                        <key>OfferedServerAddresses</key>
                                        <array>
                                                  <string>192.168.1.1</string>
                                                  <string>2605:e000:1603:c025:82ea:96ff:fee6:e06e</string>
                                        </array>
                              </dict>
                              <key>IPSec</key>
                              <dict>
                                        <key>AuthenticationMethod</key>
                                        <string>SharedSecret</string>
                                        <key>IdentifierVerification</key>
                                        <string>None</string>
                                        <key>LocalCertificate</key>
                                        <data>
                                        </data>
                                        <key>LocalIdentifier</key>
                                        <string></string>
                                        <key>RemoteIdentifier</key>
                                        <string></string>
                                        <key>SharedSecret</key>
                                        <string>com.apple.ppp.l2tp</string>
                                        <key>SharedSecretEncryption</key>
                                        <string>Keychain</string>
                              </dict>
                              <key>IPv4</key>
                              <dict>
                                        <key>ConfigMethod</key>
                                        <string>Manual</string>
                                        <key>DestAddressRanges</key>
                                        <array>
                                                  <string>192.168.1.205</string>
                                                  <string>192.168.1.235</string>
                                        </array>
                                        <key>OfferedRouteAddresses</key>
                                        <array/>
                                        <key>OfferedRouteMasks</key>
                                        <array/>
                                        <key>OfferedRouteTypes</key>
                                        <array/>
                              </dict>
                              <key>Interface</key>
                              <dict>
                                        <key>SubType</key>
                                        <string>L2TP</string>
                                        <key>Type</key>
                                        <string>PPP</string>
                              </dict>
                              <key>L2TP</key>
                              <dict>
                                        <key>Transport</key>
                                        <string>IPSec</string>
                              </dict>
                              <key>PPP</key>
                              <dict>
                                        <key>ACSPEnabled</key>
                                        <integer>1</integer>
                                        <key>AuthenticatorACLPlugins</key>
                                        <array>
                                                  <string>DSACL</string>
                                        </array>
                                        <key>AuthenticatorEAPPlugins</key>
                                        <array>
                                                  <string>EAP-KRB</string>
                                        </array>
                                        <key>AuthenticatorPlugins</key>
                                        <array>
                                                  <string>DSAuth</string>
                                        </array>
                                        <key>AuthenticatorProtocol</key>
                                        <array>
                                                  <string>MSCHAP2</string>
                                        </array>
                                        <key>DisconnectOnIdle</key>
                                        <integer>1</integer>
                                        <key>DisconnectOnIdleTimer</key>
                                        <integer>7200</integer>
                                        <key>IPCPCompressionVJ</key>
                                        <integer>0</integer>
                                        <key>LCPEchoEnabled</key>
                                        <integer>1</integer>
                                        <key>LCPEchoFailure</key>
                                        <integer>5</integer>
                                        <key>LCPEchoInterval</key>
                                        <integer>60</integer>
                                        <key>Logfile</key>
                                        <string>/var/log/ppp/vpnd.log</string>
                                        <key>VerboseLogging</key>
                                        <integer>1</integer>
                              </dict>
                              <key>Radius</key>
                              <dict>
                                        <key>Servers</key>
                                        <array>
                                                  <dict>
                                                            <key>Address</key>
                                                            <string>1.1.1.1</string>
                                                            <key>SharedSecret</key>
                                                            <string>1</string>
                                                  </dict>
                                                  <dict>
                                                            <key>Address</key>
                                                            <string>2.2.2.2</string>
                                                            <key>SharedSecret</key>
                                                            <string>2</string>
                                                  </dict>
                                        </array>
                              </dict>
                              <key>Server</key>
                              <dict>
                                        <key>LoadBalancingAddress</key>
                                        <string>1.2.3.4</string>
                                        <key>LoadBalancingEnabled</key>
                                        <integer>0</integer>
                                        <key>Logfile</key>
                                        <string>/var/log/ppp/vpnd.log</string>
                                        <key>MaximumSessions</key>
                                        <integer>128</integer>
                                        <key>VerboseLogging</key>
                                        <integer>1</integer>
                              </dict>
                    </dict>
                    <key>com.apple.ppp.pptp</key>
                    <dict>
                              <key>DNS</key>
                              <dict>
                                        <key>OfferedSearchDomains</key>
                                        <array>
                                                  <string>socal.rr.com</string>
                                        </array>
                                        <key>OfferedServerAddresses</key>
                                        <array>
                                                  <string>192.168.1.1</string>
                                                  <string>2605:e000:1603:c025:82ea:96ff:fee6:e06e</string>
                                        </array>
                              </dict>
                              <key>IPv4</key>
                              <dict>
                                        <key>ConfigMethod</key>
                                        <string>Manual</string>
                                        <key>DestAddressRanges</key>
                                        <array>
                                                  <string>192.168.1.236</string>
                                                  <string>192.168.1.244</string>
                                        </array>
                                        <key>OfferedRouteAddresses</key>
                                        <array/>
                                        <key>OfferedRouteMasks</key>
                                        <array/>
                                        <key>OfferedRouteTypes</key>
                                        <array/>
                              </dict>
                              <key>Interface</key>
                              <dict>
                                        <key>SubType</key>
                                        <string>PPTP</string>
                                        <key>Type</key>
                                        <string>PPP</string>
                              </dict>
                              <key>PPP</key>
                              <dict>
                                        <key>ACSPEnabled</key>
                                        <integer>1</integer>
                                        <key>AuthenticatorACLPlugins</key>
                                        <array>
                                                  <string>DSACL</string>
                                        </array>
                                        <key>AuthenticatorEAPPlugins</key>
                                        <array>
                                                  <string>EAP-RSA</string>
                                        </array>
                                        <key>AuthenticatorPlugins</key>
                                        <array>
                                                  <string>DSAuth</string>
                                        </array>
                                        <key>AuthenticatorProtocol</key>
                                        <array>
                                                  <string>MSCHAP2</string>
                                        </array>
                                        <key>CCPEnabled</key>
                                        <integer>1</integer>
                                        <key>CCPProtocols</key>
                                        <array>
                                                  <string>MPPE</string>
                                        </array>
                                        <key>DisconnectOnIdle</key>
                                        <integer>1</integer>
                                        <key>DisconnectOnIdleTimer</key>
                                        <integer>7200</integer>
                                        <key>IPCPCompressionVJ</key>
                                        <integer>0</integer>
                                        <key>LCPEchoEnabled</key>
                                        <integer>1</integer>
                                        <key>LCPEchoFailure</key>
                                        <integer>5</integer>
                                        <key>LCPEchoInterval</key>
                                        <integer>60</integer>
                                        <key>Logfile</key>
                                        <string>/var/log/ppp/vpnd.log</string>
                                        <key>MPPEKeySize128</key>
                                        <integer>1</integer>
                                        <key>MPPEKeySize40</key>
                                        <integer>0</integer>
                                        <key>VerboseLogging</key>
                                        <integer>1</integer>
                              </dict>
                              <key>Radius</key>
                              <dict>
                                        <key>Servers</key>
                                        <array>
                                                  <dict>
                                                            <key>Address</key>
                                                            <string>1.1.1.1</string>
                                                            <key>SharedSecret</key>
                                                            <string>1</string>
                                                  </dict>
                                                  <dict>
                                                            <key>Address</key>
                                                            <string>2.2.2.2</string>
                                                            <key>SharedSecret</key>
                                                            <string>2</string>
                                                  </dict>
                                        </array>
                              </dict>
                              <key>Server</key>
                              <dict>
                                        <key>Logfile</key>
                                        <string>/var/log/ppp/vpnd.log</string>
                                        <key>MaximumSessions</key>
                                        <integer>128</integer>
                                        <key>VerboseLogging</key>
                                        <integer>1</integer>
                              </dict>
                    </dict>
          </dict>
          <key>VPNHost</key>
          <string>felixjen.com</string>
</dict>

</plist>

Reply

Answer 8

Linc Davis

Level 10

209,739 points

May 11, 2014 5:47 PM in response to xoxorockoutloud123

Start the server in safe mode and test.

Reply

Answer 9

May 12, 2014 9:47 PM in response to Linc Davis

Got a chance to test it both locally and remotely in safe mode, even with all startup items removed. I still have not had any luck! This is so annoying!!!

Reply

Answer 10

jepping

Level 3

785 points

May 13, 2014 7:40 AM in response to xoxorockoutloud123

Any other services acting up? Is it just VPN not working or more services that don't run as they should...

Tell us more about your setup and test if other services are working correctly or not.

Reply

Answer 11

May 13, 2014 8:50 AM in response to jepping

Well I think my PostgreSQL isn't working because I tried installing Roundcube from the TopicDesk installer but it fails to install. But, that's a problem for another day. I am running Calendar, Contacts, Websites, DNS, And FTP. Those are working fine. Also have Plex Media Server running in the background on the default port. No problems there either. I have the server backing up to an external drive through Time Machine. Running an AirPort Extreme as a router with the server connected over Ethernet. It's a Mac Mini server but I doubt that would make a difference.

Thanks!!!

Reply

Answer 12

jepping

Level 3

785 points

May 13, 2014 9:03 AM in response to xoxorockoutloud123

Does your router support VPN?

Before your start taking your server apart, that might just do the trick for now and come back to battle the evil vpn beast later on.

Depending on your model you can setup VPN inside your router.

Worth taking a look, or do you have an older macmini lying around just for vpn functionality?

Reply

Answer 13

Linc Davis

Level 10

209,739 points

May 13, 2014 9:29 AM in response to xoxorockoutloud123

Back up all data. Reinstall Server by moving the application to the Trash, confirming, and then redownloading it from the App Store. Your server data will be preserved.

If there's no change, reinstall OS X.

Reply

Answer 14

May 14, 2014 12:38 PM in response to jepping

As far as I know, my Airport Extreme does not support a VPN service directly from the router. I actually got a Mac Mini very recently to use as a dedicated server for lots of services.

I will try a server reinstall tonight.

Reply