[c-nsp] Cisco VPN client on Mac OS X 10.4 - still broken?

[Dennis Peng]

There's another bug which may be responsible for many of the problems
we are seeing, CSCeh96683. See if it applies to you:

===
Symptoms
After making a successful connection with the 4.6.03.0160 Mac VPN Client on
Mac OS X 10.4, no traffic passes and the user cannot disconnect.  Force Quit
is required to kill the VPN Client.

Conditions
A particular VPN Concentrator configuration in the group is causing this issue.
This is a VPN Client bug that only exists when using Mac OS X 10.4.

Workaround
If DNS is being pushed by the group a "Default Domain Name" MUST be filled in
for the group under the client config tab of the group or inherited from the
base group.

Alternatively, removing the DNS push no longer requires the Default Domain Name.
===

Dennis

Tristan Gulyas [zardoz at hotblack.net] wrote:
> Dennis (and others),
> 
> Apparently the workaround given thus far has been to use the text-mode 
> client however that also doesn't appear to work.
> 
> We have opened a case with the TAC and are working to resolve the problem.
> 
> There *is* a light at the end of the tunnel!
> 
> .t
> 
> 
> ----- Original Message ----- 
> From: "Dennis Peng" <dpeng at cisco.com>
> To: "Tristan Gulyas" <zardoz at hotblack.net>
> Cc: <cisco-nsp at puck.nether.net>
> Sent: Wednesday, May 18, 2005 7:08 AM
> Subject: Re: [c-nsp] Cisco VPN client on Mac OS X 10.4 - still broken?
> 
> 
> > There are a couple of issues with 4.6.3 and Tiger.
> >
> > CSCeh92574: Kernel panic when trying to do AFP over the tunnel
> > CSCeh93569: Unable to pass traffic or disconnect/quit after connecting
> >
> > Sounds like you may be running into CSCeh93569. I'd suggest opening a
> > TAC case, linking to the bug and working with the engineer who is
> > working all of these cases so we can get this resolved as quickly as
> > possible. Thanks.
> >
> > Dennis
> >
> > Tristan Gulyas [zardoz at hotblack.net] wrote:
> >> All,
> >>
> >> Cisco have finally graced the world of Mac users with their 
> >> Tiger-compatible
> >> 4.6.03(0160) client which is officially supported under OS X 10.4.
> >>
> >> Unfrotunately I'm not having any luck.
> >>
> >> I have attempted to connect to our Cisco VPN concentrator (3000 series) 
> >> and
> >> it connects, authenticates and displays the connection banner, however, 
> >> it
> >> doesn't give me any details within the client and the OS doesn't seem to
> >> have a tunnel active.  The client doesn't even show an IP address for the
> >> link and packets still go out the network interface as if I hadn't even
> >> started the client.
> >>
> >> Furthermore, when I try and disconnect, nothing happens - the disconnect
> >> button greys itself out for a second and that's it.  I can't even quit 
> >> the
> >> VPN client and the only way out of it is to kill -9 it.
> >>
> >> I have  tried removing the client by hand by removing all modules and
> >> settings files.  I have also tried the 10.4.1 OS update with identical
> >> results.
> >>
> >> Others seem to be expericing the same problem.  Is this likely to be a
> >> configuration issue with our concentrators? Our production clients are 
> >> the
> >> 4.03 release.  Is there anything different with the PCF profiles between
> >> 4.03 and 4.6?
> >>
> >> thanks,
> >> Tristan
> >>
> >> _______________________________________________
> >> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> >> https://puck.nether.net/mailman/listinfo/cisco-nsp
> >> archive at http://puck.nether.net/pipermail/cisco-nsp/
> > 
> 
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/