cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
91438
Views
15
Helpful
14
Replies

Window 7 connects to VPN but not Remote Desktop

Jay Coleman
Level 1
Level 1

Hi,  we just got several laptops that came with Windows 7 Pro 32bit installed, and we have installed the VPN Client 5.0.06.0110.  The VPN client appears to connect to our ASA5510, but we are unable to connect to any machines on our network as it does on our XP machines.  Furthermore, we cannot ping any as well.  Also, while connected the Windows 7 machine is still able to access internet site as if split-tunneling was configured, which its not!  I've seen alot of people posting on the internet about the same issue, but I have not run into any resolutions that work.  Any ideas?

Thanks,

Jay

14 Replies 14

andrew.prince
Level 10
Level 10

Jay,

Turn logging on the client on one of the macines and post the output.

Here is the log:

Cisco Systems VPN Client Version 5.0.06.0110
Copyright (C) 1998-2009 Cisco Systems, Inc. All Rights Reserved.
Client Type(s): Windows, WinNT
Running on: 6.1.7600

6      18:07:10.056  03/16/10  Sev=Warning/2    CVPND/0xE3400013
AddRoute failed to add a route with metric of 0: code 160
    Destination    192.168.10.0
    Netmask    255.255.255.0
    Gateway    10.0.0.1
    Interface    10.10.85.54

7      18:07:10.056  03/16/10  Sev=Warning/2    CM/0xA3100024
Unable to add route. Network: c0a80a00, Netmask: ffffff00, Interface: a0a5536, Gateway: a000001.

8      18:08:25.839  03/16/10  Sev=Warning/2    CVPND/0xA3400015
Error with call to IpHlpApi.DLL: CheckUpVASettings: Found IPADDR entry addr=10.10.85.54, error 0

9      18:08:26.853  03/16/10  Sev=Warning/2    CVPND/0xA3400015
Error with call to IpHlpApi.DLL: CleanUpVASettings: Was able to delete all VA settings after all, error 0

10     18:08:27.258  03/16/10  Sev=Warning/2    IKE/0xA3000067
Received an IPC message during invalid state (IKE_MAIN:512)

I have seen this issue before myself and the causes were:-

1) Running a 32bit client on 64 bit system.

2) Incorrect installation.

3) Firewall issues on software installation.

4) GPO issues on running/installing software.

HTH>

It appears to be a routing issue.  And for some reason it works fin in XP and not Win 7.  Here is some more info:

When doing a Route Print in XP I get:

XP Route Print

C:\>route print

===========================================================================

Interface List

0x1 ........................... MS TCP Loopback interface

0x2 ...00 18 de 9d 57 0a ...... Intel(R) PRO/Wireless 3945ABG Network Connection

- Teefer2 Miniport

0x3 ...00 15 58 7d 37 1e ...... Intel(R) PRO/1000 PL Network Connection - Teefer

2 Miniport

0xd0005 ...00 05 9a 3c 78 00 ...... Cisco Systems VPN Adapter - Teefer2 Miniport

===========================================================================

===========================================================================

Active Routes:

Network Destination        Netmask          Gateway       Interface  Metric

          0.0.0.0          0.0.0.0      10.10.85.58     10.10.85.58       1

          0.0.0.0          0.0.0.0     192.168.10.1   192.168.10.15       20

         10.0.0.0        255.0.0.0      10.10.85.58     10.10.85.58       20

      10.10.85.58  255.255.255.255        127.0.0.1       127.0.0.1       20

   10.255.255.255  255.255.255.255      10.10.85.58     10.10.85.58       20

   65.216.134.146  255.255.255.255     192.168.10.1   192.168.10.15       1

        127.0.0.0        255.0.0.0        127.0.0.1       127.0.0.1       1

     192.168.10.0    255.255.255.0    192.168.10.15   192.168.10.15       20

     192.168.10.1  255.255.255.255    192.168.10.15   192.168.10.15       1

    192.168.10.15  255.255.255.255        127.0.0.1       127.0.0.1       20

   192.168.10.255  255.255.255.255    192.168.10.15   192.168.10.15       20

        224.0.0.0        240.0.0.0      10.10.85.58     10.10.85.58       20

        224.0.0.0        240.0.0.0    192.168.10.15   192.168.10.15       20

  255.255.255.255  255.255.255.255      10.10.85.58     10.10.85.58       1

  255.255.255.255  255.255.255.255    192.168.10.15   192.168.10.15       1

  255.255.255.255  255.255.255.255    192.168.10.15               2       1

Default Gateway:       10.10.85.58

===========================================================================

Persistent Routes:

  None

When doing a Route Print in Win 7 I get:

C:\>route print
===========================================================================
Interface List
21...00 05 9a 3c 78 00 ......Cisco Systems VPN Adapter
11...00 26 9e bc ad bd ......Realtek PCIe GBE Family Controller
  1...........................Software Loopback Interface 1
15...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter
12...00 00 00 00 00 00 00 e0 Microsoft 6to4 Adapter
14...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #2
16...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface
===========================================================================

IPv4 Route Table
===========================================================================
Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0     192.168.10.1    192.168.10.33     20
          0.0.0.0          0.0.0.0         10.0.0.1      10.10.85.57    100
         10.0.0.0        255.0.0.0         On-link       10.10.85.57    276
      10.10.85.57  255.255.255.255         On-link       10.10.85.57    276
   10.255.255.255  255.255.255.255         On-link       10.10.85.57    276
   65.216.134.146  255.255.255.255     192.168.10.1    192.168.10.33    100
        127.0.0.0        255.0.0.0         On-link         127.0.0.1    306
        127.0.0.1  255.255.255.255         On-link         127.0.0.1    306
  127.255.255.255  255.255.255.255         On-link         127.0.0.1    306
     192.168.10.0    255.255.255.0         On-link     192.168.10.33    276
     192.168.10.1  255.255.255.255         On-link     192.168.10.33    100
    192.168.10.33  255.255.255.255         On-link     192.168.10.33    276
    192.168.10.33  255.255.255.255         10.0.0.1      10.10.85.57    276
   192.168.10.255  255.255.255.255         On-link     192.168.10.33    276
   192.168.10.255  255.255.255.255         10.0.0.1      10.10.85.57    276
        224.0.0.0        240.0.0.0         On-link         127.0.0.1    306
        224.0.0.0        240.0.0.0         On-link     192.168.10.33    276
        224.0.0.0        240.0.0.0         On-link       10.10.85.57    276
  255.255.255.255  255.255.255.255         On-link         127.0.0.1    306
  255.255.255.255  255.255.255.255         On-link     192.168.10.33    276
  255.255.255.255  255.255.255.255         On-link       10.10.85.57    276
===========================================================================
Persistent Routes:
  None

I was able to make it work by doing the following command, but this is a work around, not a resoltion.

Route –p ADD 192.168.1.0 MASK 255.255.255.0 10.10.85.58 METRIC 1

Thanks,

Jay

As I said something is stopping the client from putting the route into the machines local routing table.

mflyg
Level 1
Level 1

I get exactly the same problem today on a VPN configuration that used to work recently. The only change I can think of is that there has been a recent security update for Windows 7 on the 14th of April (KB978601, KB979683, KB981332, KB979309, KB80232) which maybe have created the problem? Messages 1 and 2 below appeared when I connected the VPN session. 3 to 6 when I disconnect. It looks like the VPN client is not allowed to add a route. Tried to run VPN client as administrator as well, but it did not help. I include the route prints before and after connecting as well.

(running 32 bit client on 32bit win7, disabled the firewall and the installation has been working before)

Cisco Systems VPN Client Version 5.0.06.0160

Copyright (C) 1998-2009 Cisco Systems, Inc. All Rights Reserved.

Client Type(s): Windows, WinNT

Running on: 6.1.7600

Config file directory: C:\Program Files\Cisco Systems\VPN Client\

1      09:47:13.903  04/16/10  Sev=Warning/2 CVPND/0xE3400013

AddRoute failed to add a route with metric of 0: code 160

Destination 10.10.21.255

Netmask 255.255.255.255

Gateway 10.0.0.1

Interface 10.1.225.161

2      09:47:13.903  04/16/10  Sev=Warning/2 CM/0xA3100024

Unable to add route. Network: a0a15ff, Netmask: ffffffff, Interface: a01e1a1, Gateway: a000001.

3      09:54:07.748  04/16/10  Sev=Warning/2 CVPND/0xA3400015

Error with call to IpHlpApi.DLL: CheckUpVASettings: Found IPADDR entry addr=10.1.225.161, error 0

4      09:54:08.751  04/16/10  Sev=Warning/2 CVPND/0xA3400015

Error with call to IpHlpApi.DLL: CheckUpVASettings: Found IPADDR entry addr=10.1.225.161, error 0

5      09:54:09.754  04/16/10  Sev=Warning/2 CVPND/0xA3400015

Error with call to IpHlpApi.DLL: CleanUpVASettings: Was able to delete all VA settings after all, error 0

6      09:54:10.377  04/16/10  Sev=Warning/2 IKE/0xA3000067

Received an IPC message during invalid state (IKE_MAIN:512)

Here is a route print before connecting:

H:\>route print

===========================================================================

Interface List

11...00 17 31 54 19 34 ......Intel(R) PRO/1000 PL Network Connection

  1...........................Software Loopback Interface 1

12...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter

===========================================================================

IPv4 Route Table

===========================================================================

Active Routes:

Network Destination        Netmask          Gateway       Interface  Metric

          0.0.0.0          0.0.0.0     10.10.21.254      10.10.21.75     20

       10.10.21.0    255.255.255.0         On-link       10.10.21.75    276

      10.10.21.75  255.255.255.255         On-link       10.10.21.75    276

     10.10.21.255  255.255.255.255         On-link       10.10.21.75    276

        127.0.0.0        255.0.0.0         On-link         127.0.0.1    306

        127.0.0.1  255.255.255.255         On-link         127.0.0.1    306

  127.255.255.255  255.255.255.255         On-link         127.0.0.1    306

        224.0.0.0        240.0.0.0         On-link         127.0.0.1    306

        224.0.0.0        240.0.0.0         On-link       10.10.21.75    276

  255.255.255.255  255.255.255.255         On-link         127.0.0.1    306

  255.255.255.255  255.255.255.255         On-link       10.10.21.75    276

===========================================================================

Persistent Routes:

  None

IPv6 Route Table

===========================================================================

Active Routes:

If Metric Network Destination      Gateway

  1    306 ::1/128                  On-link

11    276 fe80::/64                On-link

11    276 fe80::11c9:eafd:5583:f83a/128

                                    On-link

  1    306 ff00::/8                 On-link

11    276 ff00::/8                 On-link

===========================================================================

Persistent Routes:

  None

Here is a route print after connecting

C:\>route print

===========================================================================

Interface List

16...00 05 9a 3c 78 00 ......Cisco Systems VPN Adapter

11...00 17 31 54 19 34 ......Intel(R) PRO/1000 PL Network Connection

  1...........................Software Loopback Interface 1

12...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter

===========================================================================

IPv4 Route Table

===========================================================================

Active Routes:

Network Destination        Netmask          Gateway       Interface  Metric

          0.0.0.0          0.0.0.0     10.10.21.254      10.10.21.75     20

          0.0.0.0          0.0.0.0         10.0.0.1     10.1.225.175     21

         10.0.0.0        255.0.0.0         On-link      10.1.225.175    276

     10.1.225.175  255.255.255.255         On-link      10.1.225.175    276

       10.10.21.0    255.255.255.0         On-link       10.10.21.75    276

       10.10.21.0    255.255.255.0         10.0.0.1     10.1.225.175    276

      10.10.21.75  255.255.255.255         On-link       10.10.21.75    276

      10.10.21.75  255.255.255.255         10.0.0.1     10.1.225.175    276

     10.10.21.201  255.255.255.255         On-link       10.10.21.75    100

     10.10.21.255  255.255.255.255         On-link       10.10.21.75    276

   10.255.255.255  255.255.255.255         On-link      10.1.225.175    276

        127.0.0.0        255.0.0.0         On-link         127.0.0.1    306

        127.0.0.1  255.255.255.255         On-link         127.0.0.1    306

  127.255.255.255  255.255.255.255         On-link         127.0.0.1    306

    194.20.70.220  255.255.255.255     10.10.21.254      10.10.21.75    100

        224.0.0.0        240.0.0.0         On-link         127.0.0.1    306

        224.0.0.0        240.0.0.0         On-link       10.10.21.75    276

        224.0.0.0        240.0.0.0         On-link      10.1.225.175    276

  255.255.255.255  255.255.255.255         On-link         127.0.0.1    306

  255.255.255.255  255.255.255.255         On-link       10.10.21.75    276

  255.255.255.255  255.255.255.255         On-link      10.1.225.175    276

===========================================================================

Persistent Routes:

  Network Address          Netmask  Gateway Address  Metric

          0.0.0.0          0.0.0.0         10.0.0.1       1

===========================================================================

IPv6 Route Table

===========================================================================

Active Routes:

If Metric Network Destination      Gateway

  1    306 ::1/128                  On-link

11    276 fe80::/64                On-link

16    276 fe80::/64                On-link

11    276 fe80::11c9:eafd:5583:f83a/128

                                    On-link

16    276 fe80::d48f:c783:79a4:ed52/128

                                    On-link

  1    306 ff00::/8                 On-link

11    276 ff00::/8                 On-link

16    276 ff00::/8                 On-link

===========================================================================

Persistent Routes:

  None

I have exactly the same problem. Is there a solution ?

Best regards

BD

ed.lyons
Level 1
Level 1

I am also having this problem.

Plus, I have an addtional question. Is the log message "AddRoute ... with a metric of 0" wrong, or is the VPN client really trying to use a metric of 0?

I do not think 0 is a legal value for a metric.

Ed Lyons

partnerscisco
Level 1
Level 1

Same problem here. Is there a solution ?

Windows 7 Pro, 32bit - Cisco System VPN Client Version 5.0.07.0290

Thanks

DP

I had to open a Cisco TAC Case to get it resolved.  I wish I had more info for you guys, but the tech moved quite fast and I did not save the log by accident.

I found a solution thats works for me:

1.Uninstall the previous version of Cisco VPN client

2.Reboot

3.Download the Citrix DNE Update and install it (or REPAIR if already installed from a previous attempt) from http://www.citrix.com/lang/English/lp/lp_1680845.asp

or use this link:

Citrix DNE - ftp://files.citrix.com/winfix.exe

32bit update - ftp://files.citrix.com/dneupdate.msi

ftp://files.citrix.com/dneupdate.msi64bit update - ftp://files.citrix.com/dneupdate64.msi

4.Reboot

5.Install the Cisco VPN Client (i use 5.0.07.0290)

7.Reboot

8.Rebuild the connection profile (previous one was no longer visible for some reason)

DP

I solved the issue following David Petrik's instructions.

Thanks David.

My scenario was as follows:

Windows 7 professional 32 bits.

Cisco vpn client version 5.0.6 was installed.

Laptop connects to Cisco router 881 but cannot access LAN resources, no Remote Desktop, no ping to default gateway router interface.

Cisco VPN client worked on the laptop for a couple of months and suddenly it stopped working. The reason was not determined.

Other laptops with Windows Xp or Mac OS X worked ok.

FP

change client vpn to version  5.0.04.0300 resolved problem

I Faced Such issue.  WIFI Internet Router in my Home was giving my IP of 192.168.1.x subnet and after connecting to vpn client i want to access ip 192.168.1.x.  So it was causing problem because i am locally connted to 1.x and after connecting to vpn client i want to access remote 1.x that was not possible.  So i change my WIFI Internet Router Local Subnet to 2.x and problem was solved.

Jawad
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: