| View previous topic :: View next topic |
| Author |
Message |
visortgw EVDO User
Joined: 28 Oct 2005 Posts: 67
|
Posted: Wed Apr 12, 2006 8:56 am Post subject: Working VPN with KR1 |
|
|
| Unlike most users in this forum, I have been able to successfully use a VPN connection to our corporate network using the KR1 and KPC650. We use Cisco VPN Client v4.0.3 (F), which is an older version. I could provide a sanitized copy (with IP addresses, group encryption password, etc. removed) of the configuration text file if it might help others determine what exactly breaks the majority of VPNs. It is possible that the actual configuration parameters/settings drive whether or not it works. |
|
| Back to top |
|
 |
Scott EVDO Junkie
Joined: 18 Jul 2005 Posts: 530 Location: Central Coast of California
|
Posted: Wed Apr 12, 2006 9:39 am Post subject: |
|
|
| Thanks for the post. Are your clients connecting successfully over the Wi-Fi access point built in to the KR1 or via an ethernet cable connected to one of the four KR1 switch ports? |
|
| Back to top |
|
 |
Mackieman EVDO Junkie
Joined: 31 Oct 2005 Posts: 453
|
Posted: Wed Apr 12, 2006 10:50 am Post subject: |
|
|
| Generally, the issue stems from the type of security employed by the VPN concentrator. EAP/ESP/IKE and those sorts of security protocols are not supported on KR1. From an official standpoint, the only thing supported is generic (read: Windows) flavors of PPTP and IPSec passthrough. Anything above that may work as in this case, or may not as in the case of others. |
|
| Back to top |
|
 |
pverzoni EVDO Newbie
Joined: 30 Mar 2006 Posts: 10
|
Posted: Wed Apr 12, 2006 11:08 am Post subject: |
|
|
In our setup we can successfully connect via VPN when using one of the 4 switch ports, but not when using the WI-FI access point.
To workaround this we disabled the access point on the KR1 and placed a Netgear Access Point on one of the physical ports. Yes this is sloppy but its the only way we can get it to work.
| Scott wrote: | | Thanks for the post. Are your clients connecting successfully over the Wi-Fi access point built in to the KR1 or via an ethernet cable connected to one of the four KR1 switch ports? |
|
|
| Back to top |
|
 |
visortgw EVDO User
Joined: 28 Oct 2005 Posts: 67
|
Posted: Wed Apr 12, 2006 11:56 am Post subject: |
|
|
| Scott wrote: | | Thanks for the post. Are your clients connecting successfully over the Wi-Fi access point built in to the KR1 or via an ethernet cable connected to one of the four KR1 switch ports? |
Both hardwired and wireless connections work. The VPN connection is configured to use "IPSec over UDP (NAT/PAT)". |
|
| Back to top |
|
 |
visortgw EVDO User
Joined: 28 Oct 2005 Posts: 67
|
Posted: Wed Apr 12, 2006 12:16 pm Post subject: |
|
|
| pverzoni wrote: | In our setup we can successfully connect via VPN when using one of the 4 switch ports, but not when using the WI-FI access point.
To workaround this we disabled the access point on the KR1 and placed a Netgear Access Point on one of the physical ports. Yes this is sloppy but its the only way we can get it to work. |
Interesting work-around -- I'll have to keep it in mind in the event that our IT department changes the VPN configuration to one not supported by the KR1. I travel with an Asus WL-330g mini-router/access point (about the size of a pack of cigarettes) that I use in hotel rooms -- I could connect it to the KR1, if necessary. |
|
| Back to top |
|
 |
nativgod EVDO Newbie
Joined: 22 May 2006 Posts: 3
|
Posted: Mon May 22, 2006 7:21 am Post subject: |
|
|
| I have enabled TCP over IPSec port 10000 and can connect with no problems. I used both Cisco 3002 VPN Hardware client and Cisco VPN Client software. |
|
| Back to top |
|
 |
visortgw EVDO User
Joined: 28 Oct 2005 Posts: 67
|
Posted: Mon May 22, 2006 8:45 am Post subject: |
|
|
| nativgod wrote: | | I have enabled TCP over IPSec port 10000 and can connect with no problems. I used both Cisco 3002 VPN Hardware client and Cisco VPN Client software. |
Interesting discovery with respect to port 10000! I had (past tense!) a working VPN connection, but our corporate IT department switched VPN servers, causing my VPN connection to no longer work with the KR1. I looked at the new vs. old configuration files to discover that in addition to changing the VPN server, they changed from port 10000 to port 4500. I edited the config file to try port 10000 (KPC650 in laptop without the KR1), and it works. I need to try the port 10000 conguration with the KR1 later this week when I am back in town. (Cisco Systems VPN Client v4.0.3 (F)) |
|
| Back to top |
|
 |
malynj EVDO Newbie
Joined: 08 Dec 2005 Posts: 3
|
Posted: Wed Jun 07, 2006 2:43 pm Post subject: Microsoft PPTP |
|
|
I haven't read through all of the VPN issues posted, but i can get Microsoft PPTP VPN to work both wired and wireless through this router on Verizon's network. This is using the RK1002 firmware. No modifications to the client or router were needed to get it working.
Milage may vary though. |
|
| Back to top |
|
 |
Mackieman EVDO Junkie
Joined: 31 Oct 2005 Posts: 453
|
Posted: Wed Jun 07, 2006 2:49 pm Post subject: Re: Microsoft PPTP |
|
|
| malynj wrote: | I haven't read through all of the VPN issues posted, but i can get Microsoft PPTP VPN to work both wired and wireless through this router on Verizon's network. This is using the RK1002 firmware. No modifications to the client or router were needed to get it working.
Milage may vary though. |
Had you read the other VPN issues, you'd know that the versions verified to be compatible are the Microsoft PPTP and IPSec flavors.  |
|
| Back to top |
|
 |
|