1825882 Members
2970 Online
109689 Solutions
New Discussion

VPN

 
Fadia Almarei
Super Advisor

VPN

Dear All

I have VPN error wih TCP configuragtion ,

Initializing the VPN connection.
Initiating TCP to 212.35.66.36, port 5020
Secure VPN Connection terminated locally by the Client
Reason: Failed to establish a TCP connection.
There are no new notification messages at this time.”


any ideas please
fadia.marei
5 REPLIES 5
Steven E. Protter
Exalted Contributor

Re: VPN

Shalom,

It would be helpful to know your Linux distribution, what client you are using and what configuration steps you have taken thus far.

SEP
Steven E Protter
Owner of ISN Corporation
http://isnamerica.com
http://hpuxconsulting.com
Sponsor: http://hpux.ws
Twitter: http://twitter.com/hpuxlinux
Founder http://newdatacloud.com
Fadia Almarei
Super Advisor

Re: VPN

it is RHEL4 , VPN cisco 4.6 ,
fadia.marei
skt_skt
Honored Contributor

Re: VPN

Looks like the port requirement at the client side itself is not working as desired.

is there a specific port requierment at client side?check with "netstat -ntlp"
markmcjr
Occasional Advisor

Re: VPN

I agree, more information about the VPN client you are using would be helpful.

Here are some things to think about:

-Some home bases routers (linksys,netgear, etc) or firewalls need to be need to be configured to route IPSEC correctly (assuming thats the protocol your VPN is using)

-If you have a Firewall on the Linux workstation, I would also check that as well.

-Check your logs (/var/log/messages, etc)

Let us know a little more about your setup so that we maybe able to assist more.

Regards
Mark
www.mytruetech.com
Matti_Kurkela
Honored Contributor

Re: VPN

First, has the cisco_ipsec kernel module been installed properly?
Run "lsmod |grep cisco_ipsec" to see. If it displays nothing at all, the module is not installed.

Note that you'll need to recompile the cisco_ipsec module each time you install a kernel update. To recompile the module, you must have the "kernel-devel" package that matches your kernel version and flavor installed on your system. (I.e. if you use smp or hugemem kernel, you must use the appropriate version of "kernel-smp-devel" or "kernel-hugemem-devel" package instead.)

There is a free alternative for Cisco VPN client:
http://www.unix-ag.uni-kl.de/~massar/vpnc/

It does not require any kernel modules like the Cisco product does. However, it does not have all the features the Cisco product has.

MK
MK