Buy or Renew
Buy or Renew
Duo Security forums now LIVE! Get answers to all your Duo Security questions. Learn more
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
721
Views
0
Helpful
4
Replies

VPN session remains up but can no longer get to internal devices

CSCO10203269
Level 1
Level 1

‎12-03-2008 09:06 AM - edited ‎02-21-2020 03:08 AM

Our remote users in Germany are provided with a mixture of Vodafone 3G Mobile Connect Cards (PCMCIA) and "USB sticks" for cellular broadband access. Installed on their laptops is Vodafone's Mobile Connect Client & Cisco VPN client version 5.

To connect, they first connect to Vodafone's "VPN access point" -- Vodafone's VPN only service offering. Once connected, they VPN into the network with the Cisco client. All users connect to a Cisco 3020 Concentrator.

Users are able to access network resources, however, they lose connectivity after 5-10min. What's unusual is, it doesn't look like the VPN session drops since the padlock in the right hand corner remains locked; they just can't access network resources.

To troubleshoot...

a) We had a user establish a VPN session then immediately start a continuous ping to an internal device's IP address. The connection stayed up for 20min before requests started timing out.

b) We enabled "IPSec over TCP" on the client and Concentrator side, no change.

What could possibly be causing this behavior?

0 Helpful
4 Replies 4

CSCO10203269
Level 1
Level 1

‎12-04-2008 08:01 AM

Attached is a screenshot showing the pings failing, yet, the Cisco padlock is still locked.

0 Helpful

CSCO10203269
Level 1
Level 1
In response to CSCO10203269

‎12-04-2008 08:14 AM

Forgot to attach file.

Preview file
76 KB
0 Helpful

gdextensis
Level 1
Level 1

‎12-06-2008 05:59 AM

Does Vodafone use Venturi Transport Protocol clients for Windows like Verizon's does with their EvDO cards? If so, we had to turn off and eventually uninstall the Venturi client software because it detrimentally interfered with IPsec traffic.

-Gary

0 Helpful

CSCO10203269
Level 1
Level 1
In response to gdextensis

‎12-08-2008 05:13 AM

Gary,

I believe the Vodafone client does come with a optimization component. I ask the local contact to uninstall it to see if it makes a difference.

0 Helpful
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Customers Also Viewed These Support Documents
Review Cisco Networking products for a $25 gift card