--> --> Known Issues with the VPN Client -->

Known Issues with the VPN Client

Under normal conditions, the VPN client works in harmony with your operating system, your network connection with your ISP, and any networking or communication-related software or hardware that you have in order to create a VPN connection.  However, because of the many variations of ISPs and communication-related programs and hardware devices, there are situations where the VPN client will not work properly.

Below is a list of known issues with the VPN client.  This page was updated on March 4, 2003 to denote any known issues with the VPN 3000 client for Windows and Mac OS X and the VPN 5000 client for Macintosh 8 and 9 systems. Any Windows or OS X users who still have the VPN 5000 client should uninstall the VPN 5000 software download and install the VPN 3000 software.

VPN Client ISP(s)
Operating System(s)
Networking Hardware/Software
Problem
Solution (if any)
VPN 3000 Any Windows (all versions) Wireless access point or router When the VPN client is activated, it receives an IP address that starts with 128.8 (a UMCP IP address) but it cannot access any UMCP or non-UMCP websites. The wireless access point or router may be blocking part of the VPN tunnel. Try the following possible remedies:
  • Upgrade the firmware for your wireless access point or router (firmware is the term for the software that operates your wireless access point / router). Visit the website of the manufacturer of your wireless access point or router and find the firmware for the exact make and model of your networking hardware, then download and install it.
  • If the firmware upgrade does not work, reconfigure the VPN 3000 to use transparent tunneling over TCP port 10000. You can do this using the following steps:
    1. Open the VPN client and choose the connection entry you want to change (UMD or UMD-TunnelAll).
    2. Click on the Options button and choose Properties from the menu that appears.
    3. Place a checkmark next to Enable Transparent Tunneling, and choose Use IPSec over TCP (NAT/PAT/Firewall). Then click the OK button.
  • If reconfiguring the VPN 3000 as described above did not work, try opening the following ports in your router in order to allow network traffic to travel over that port in both directions over TCP (you will need to consult your router manual on how to do this):
    • TCP port 10000
    • TCP port 1723
    • UDP port 500
VPN 3000 Any Windows (all versions) Another VPN program The VPN 3000 client will either not install or will not work properly because of the presence of a different VPN program on the same computer. There is unfortunately no workaround to this problem: some VPN clients will not work with each other. There is also no support for using other VPN software with our VPN service.
VPN 3000 Any Windows (all versions) None The VPN 3000 client will connect and will work for several minutes and then drop the connection. Try changing the ForceKeepAlives value in the VPN settings file to 1 in order to force the VPN client to keep the session alive.

To do this, open up Notepad on your computer. Click on File and then Open, then browse to where the VPN profiles are kept (by default, they would be in C:\Program Files\Cisco Systems\VPN Client\profiles). In order to see the two different profiles, you will have to change the File Type Notepad is looking for from .txt to All. Once you see the UMD-TunnelAll.pcf file, open it in Notepad. Go down near the bottom of the settings list and change the ForceKeepAlives setting from 0 to 1. Then save the file. In some versions of Windows, Notepad will automatically try to save any file it edits to a .txt file, so you might want to browse to the profiles directory to make sure you didn't end up creating a "UMD-TunnelAll.txt" file.


How do I:
How are we doing? Comments on this page?
Office of Information Technology
Office of Information Technology University of Maryland