Any VPN gurus out there?

[mevensen]

I'm having some trouble connecting to my school through the VPN client from home, and was hoping someone might have some answers. I've spent quite a bit of time on with three different people from IT at the school without any real progress.

I don't know exactly when, but about a month ago, my VPN Client started to get flaky (not successfully connecting). But it did work intermittently. One tech told me to download the most recent VPN Client (the one I had been using was a couple years old), and ever since then, I cannot connect at all. Stupidly, I had erased the previous version of the client that had been working.

All I get is a good bit of nothing when I try to connect. The application launches, but when I hit the "connect" button, it grays out for a fraction of the second, then nothing. The status bar just reads disconnected. No errors, no request for password, nothing.

Going into the error log, I see these messages:

Cisco Systems VPN Client Version 4.8.00.0440
Copyright (C) 1998-2005 Cisco Systems, Inc. All Rights Reserved.
Client Type(s): Windows, WinNT
Running on: 5.1.2600 Service Pack 2
Config file directory: C:\Program Files\Cisco Systems\VPN Client

1 10:40:07.765 04/14/06 Sev=Warning/2 CVPND/0xE3400003
Function CreateFile failed with an error code of 0x00000002(DRVIFACE:718)

*this one shows up constantly, a new entry to the log with the same error every 0.5 seconds

2 10:40:08.203 04/14/06 Sev=Warning/3 GUI/0xA3B0000B
Reloaded the Certificates in all Certificate Stores successfully.

7 10:40:10.000 04/14/06 Sev=Warning/2 CVPND/0xE3400003
Function OpenService failed with an error code of 0x00000424(DRVIFACE:764)

8 10:40:10.000 04/14/06 Sev=Critical/1 CM/0xE3100004
Failed to initialize the ipsec driver! Returned 1

Some information:

System Windows XP Home SP2
Notron Internet Security Version 9.1.0.33
Linksys Router (don't have the model at the moment)

I have tried with and without software firewalls, with and without router.
I have spoken to my ISP, as well, and they reports no issues.
I have reinstalled the VPN client, rechecked the network config against the instructions from IT.
I did notice that this new version of the client also creates a new Local Area Connection in My Network Connections, and it is disabled upon startup. But enabling this connection does not change the behavior of the client.
I checked the Device Manager, and VPN Client is present without any error icons.
I have scanned for spyware/malware recently. (Adaware, SpyBot, Norton)

I have sent a similar summary to the IT guys, but have heard nothing back from them yet. They seem to think the problem is on my end, however. Is there any other information that would help isolate the issue?

[flawedreality5]

I also use Cisco VPN Client to connect to my university, but I'm using version 4.0.1 as it is supplied on my schoool's website. I've never had any problems with it, and my version creates the second LAN connection under Network Connections as well. Perhaps you're trying to connect to the school at a time with heavy traffic? Have you tried going back to your old version and entering all the information from scratch?

[calypso]

I know you said you have tried it with and without software firewalls but just to make sure have you tried disabling Norton Internet Security?

1 10:40:07.765 04/14/06 Sev=Warning/2 CVPND/0xE3400003
Function CreateFile failed with an error code of 0x00000002(DRVIFACE:718)

That error looks like some folder permission settings are not correct. You may want to try giving C:\Program Files\Cisco Systems\VPN Client read and write permission to "Everyone". If that seems to solve the problem you can fine tune the permissions later. I have a feeling that might fix that error.

8 10:40:10.000 04/14/06 Sev=Critical/1 CM/0xE3100004
Failed to initialize the ipsec driver! Returned 1

Regarding this error. My knowledge of ipsec is limited so I won't even try.

Calypso

[mevensen]

I also use Cisco VPN Client to connect to my university, but I'm using version 4.0.1 as it is supplied on my schoool's website. I've never had any problems with it, and my version creates the second LAN connection under Network Connections as well. Perhaps you're trying to connect to the school at a time with heavy traffic? Have you tried going back to your old version and entering all the information from scratch?

Unfortunately, going back isn't an option. I deleted my copy, and the school IT won't provide a copy of the older version. :(

[mevensen]

I know you said you have tried it with and without software firewalls but just to make sure have you tried disabling Norton Internet Security?

1 10:40:07.765 04/14/06 Sev=Warning/2 CVPND/0xE3400003
Function CreateFile failed with an error code of 0x00000002(DRVIFACE:718)

That error looks like some folder permission settings are not correct. You may want to try giving C:\Program Files\Cisco Systems\VPN Client read and write permission to "Everyone". If that seems to solve the problem you can fine tune the permissions later. I have a feeling that might fix that error.

8 10:40:10.000 04/14/06 Sev=Critical/1 CM/0xE3100004
Failed to initialize the ipsec driver! Returned 1

Regarding this error. My knowledge of ipsec is limited so I won't even try.

Calypso

I'll take a look at those permissions when I get a chance at home tonight, worth a try.

[Great_One]

To get some better information, fire up the cisco client, but before trying to connect, on the menu bar, click on log - log settings
change all fields to 3-high.
then click on log - log window
This will open a separate log window which will show what is happening when the client try to connect to the server.
Go ahead and try to connect. We should be able to use the results to determine the problem.

At first glance it seems like your ipsec stack is messed up, but the log capture will be helpful.

[mevensen]

Tried to modify the error log settings. Basically, did not return anything different in the error log.

I looked into modifying permissions, but could not find anywhere that made sense to modify in order to allow this program more access. What, exactly, should I be looking to modify here?

Thanks.

[calypso]

If you are running windows xp pro you need to disable simple folder and file sharing. Post back, google it, and/or do it you do have xp pro. If you have windows xp home you need to boot into safe mode. Once one of the previous steps has been completed you can right click the folder and go to properties. In there you should see a permissions tab. Adding "Everyone" to the list and allowing read and write permissions would be a good test. I was bored yesterday and sorta researched this. Here are my results:

http://www.telecom-gear.com/Error-connecting-using-CISCO-VPN-Client-404(D)-article9754-12.htm
(the replies are above the post)

http://www.dslreports.com/forum/remark,13717928
(just like i said) :)

Calypso