VPN Known Issues
WebVPN Known Issues
IPsecVPN Known Issues
WebVPN Known Issues
- WebVPN Client connection problem with new Windows 2000 Installations
In rare circumstances, if you install the WebVPN client on a computer that has a new or clean Windows 2000 installation, the WebVPN session may fail to connect and your computer may display the following message:
"The installer failed to execute successfully. Your computer may be missing a required Microsoft library."
This could occur if the computer does not have the file "MSSL VPN CLIENTP60.dll" located in the winnt\system32 directory. If you find this is the case, download a copy of the "MSSL VPN CLIENTP60.dll" file from the Microsoft website at www.microsoft.com. Then move the file to the winnt\system32 directory.
- WebVPN Client and Wireless Client Configurations
If your wireless adapter profile supports scanning for a better access point and you use WebVPN or IPSec VPN with that profile, disable such scanning. These scans can cause disconnections or stall traffic on the tunnel. To support scanning for non-WebVPN Client / IPSec connections, create another profile.
IPSec VPN Client Known Issues
- Internet connectivity problems after IPSec VPN installation , even when you're not using the service
This may be a problem with the MTU (maximum transmission unit) setting for your computer's internet connection. It's common with high speed internet connections using PPPoE dialers (for example, Bell Sympatico High Speed). An incorrect MTU setting typically results in unstable network connectivity which returns to normal after the VPN client is uninstalled. Symptoms may include an inability to send mail or upload files via FTP, even if you are not connected to the VPN. You can address this by changing the MTU setting. Instructions are available on the Cisco web site.
- Automatic Proxy settings may cause Internet Explorer to stop working
If you use Internet Explorer, and it's set to use 'automatic proxy' settings, it may stop working. To clear this up, remove the proxy settings. Start internet Explorer, and go to the top line menu bar. Under Tools, Internet Options, Connections, LAN Settings - make sure "Automatically detect settings" is not checked.
- Bell Sympatico High Speed Service's incompatibility with EnterNet v1.5 PPoE Dialer
Cisco has identified a compatibility issue with EnterNet v1.5 PPPoE dialer (the dialer used with Bell Sympatico High Speed). The most recent version of the VPN client seems to have corrected this problem, but you may be required to use v1.4 of the dialer with the VPN service.
- Applications that access your system's native IP address may not work
Most applications will work with the University of Guelph VPN service. However, some applications which use the native IP address rather than the IP address assigned to the VPN session may not work. Here is an example:
X-Win32: Establish your VPN session. Right-click the VPN client (lock) icon in the task bar and select Statistics. Take note of the IP address under Address Information - Client:. Next, in the X-Win32 configuration window, select the Display tab. Select proxy and enter your client IP address. You will have to modify this with every new VPN session you establish. Once you have entered an IP address, double-click proxy to enter a new IP address.
- The Cisco IPSec VPN client is incompatible with Windows Internet Connection Sharing.
The Cisco IPSec VPN client will not work on a workstation with Windows internet Connection Sharing enabled. In order to use the IPSec VPN client you must disable Windows internet Connection Sharing.
- Firewall software prevents inbound connections to your computer.
The Cisco IPSec VPN client is distributed with firewall software that is enabled by default. Firewall software prevents unauthorized access to your system, but may also prevent people from accessing certain servers on your system (FTP server, web server) or prevent them sending you files via instant messenger software.
Please note: you may disable this firewall temporarily, but it is important to re-enable the firewall software before you initiate your VPN session to the University of Guelph.
To disable the firewall software select the Options tab from the main Cisco VPN client dialogue box and uncheck Stateful Firewall (always on). To enable the software, simple check the Stateful Firewall (always on) option again.
- IPSec VPN and Wireless Client Configurations
If your wireless adapter profile supports scanning for a better access point and you use WebVPN or IPSec VPN with that profile, disable such scanning. These scans can cause disconnections or stall traffic on the tunnel. To support scanning for non-SSL VPN Client / IPSec connections, create another profile.