VPN Client
Author
Discussion

gazm

Original Poster:

885 posts

270 months

Saturday 13th March 2004
quotequote all
Does anyone here have experience with Cisco VPN client. My company purchased it ages ago and the IT guy still hasn't got around to getting it sorted for me. I think he is having problems working it out but does not want to say!!

Any help would be appreciated.

Cheers

chrisjl

787 posts

308 months

Saturday 13th March 2004
quotequote all
Some of our people used to use the Cisco client, but W2k and XP (and even 98) have built in VPN clients that are pretty straight forward to use, so I think everybody uses that instead these days.

_DJ_

5,052 posts

280 months

Saturday 13th March 2004
quotequote all
Nooo. Don't use the std OS client (it will require modification to the end system (firewall/concentrator) and you'll lose a lot of functionality. For example, the Cisco client supports NAT'd client addresses without breaking IPSEC.
As for the client, I may have a copy somewhere but AFAIK, Cisco insist that it is not distributed outside the organisation which signed an agreement with them (something to do with exporting the encryption technology used in the product).

gazm

Original Poster:

885 posts

270 months

Saturday 13th March 2004
quotequote all
I think the decision was based on security issues with OS VPN clients but it seems its got the better of our IT guy

rich-uk

1,431 posts

282 months

Saturday 13th March 2004
quotequote all
We use the Cisco VPN, what problems are you (or your IT man) having?

gazm

Original Poster:

885 posts

270 months

Sunday 14th March 2004
quotequote all
He has managed to get onto the network but is unable to see any computers / applications. i'm not 100% what should be seen (hence employing an IT person)

_DJ_

5,052 posts

280 months

Sunday 14th March 2004
quotequote all
Hmmm, have you considered this may not be a VPN related issue at all? Things to check are:

1) If you're authenticated and have a VPN session established (check for the padlock on the task bar), you should be allocated an IP address on the internal network. Can you confirm that?
2) Can you ping any other machines on the same subnet (such as a router or the concentrator itself?).
3) If you can ping a router on the same subnet, how about another device on another subnet
4) If you can do all 3 above it's likely to be a Windows name resolution issue (assuming you're using Windows of course!).
5) If it's not a Windows problem and you do 2 and most of 3 it'll either be routing or split tunnelling which is setup incorrectly!

Darren.

edited to add: some more information about your setup would be useful. i.e what device are you using to terminate the tunnel, what client OS are using, what is the VPN tunnel for etc etc.

>> Edited by _DJ_ on Sunday 14th March 14:17

>> Edited by _DJ_ on Sunday 14th March 14:18

gazm

Original Poster:

885 posts

270 months

Sunday 14th March 2004
quotequote all
Cheers DJ

Your startin to ask questions I don't know the anser to but I will print off the thread and bring it in to work with me tomorrow and try and get some.

Thanks for th ehelp and I will keep you posted.

Gareth

_DJ_

5,052 posts

280 months

Sunday 14th March 2004
quotequote all
If you really struggle with this, then contact me through my profile and I'll spare a lunchtime to talk your IT guy through it if you like. I did a lot of work doing to same thing for an ISP about 18 months ago so at the time knew the product inside out.

Darren.