Submit Hint Search The Forums LinksStatsPollsHeadlinesRSS
14,000 hints and counting!

10.4: A workaround for a Cisco VPN client problem Network
Tiger only hintThe Cisco VPN client 4.7.00 (0510) mostly works for me on OS X 10.4.4, but I get "Error 51" sporadically, and I used to have to reboot to stop it, but not any more.

I took a tip that I found on VersionTracker and did a slight tweak to the command, so that the cvpnd process daemonizes silently to the background and you don't have to remember to keep restarting it:
launchd -d /bin/sh -c \ 
"while [ 1 ]; do /private/opt/cisco-vpnclient/bin/cvpnd; done"
Hopefully Cisco will solve the problem, so that we don't have to resort to hacky solutions like this.
    •    
  • Currently 1.00 / 5
  You rated: 1 / 5 (4 votes cast)
 
[29,346 views]  

10.4: A workaround for a Cisco VPN client problem | 16 comments | Create New Account
Click here to return to the '10.4: A workaround for a Cisco VPN client problem' hint
The following comments are owned by whoever posted them. This site is not responsible for what they say.
10.4: A workaround for a Cisco VPN client problem
Authored by: JoseyWales on Feb 17, '06 08:06:16AM

The current version is 4.9.00.0050, so maybe they already have fixed it...



[ Reply to This | # ]
10.4: A workaround for a Cisco VPN client problem
Authored by: fltman on Feb 17, '06 01:05:20PM
another "clean" way is to restart the cisco service

sudo SystemStarter restart CiscoVPN

[ Reply to This | # ]
10.4: A workaround for a Cisco VPN client problem
Authored by: cgbarnard on Jul 14, '06 09:42:19AM

I am having this "Error 51" problem with VPN, but I am using my old (2003) titanium powerbook OS 10.2.8.

Sorry to be a dinosaur, but does anyone have a fix for this? Will the same terminal lines of code people mention for 10.4 work?



[ Reply to This | # ]
What a great app...
Authored by: moritzh on Feb 17, '06 07:17:47PM

It's funny to read about the Cisco VPN client still causing problems. I've personally dumped it about half a year ago because I was just too frustrated by an aplication that would frequently hang-up after a while, would sometimes not even reconnect and produce all sorts of error messages (and that was after having waited for a long while until Cisco had finally managed to get the client `running' under Tiger long after its release). It's just too annoying to permanently lose the connection while in the middle of an SSH session etc. Luckily, in my university network, they also allow for PPTP access which I can use with the client built into the OS. Since it would otherwise put too much load on the university server/gateway/whatever, they only allow unencrypted connections via PPTP (only the password is encrypted), but that's fine for me as I transmit all important data using secure connections anyway (https, IMAPS, ssh).



[ Reply to This | # ]
What a great app...
Authored by: francopotento on Feb 18, '06 02:19:27AM
I had the same issues with the Cisco VPN client, so I've been looking for another solution. I then finally stumbled over VPN Tracker. Great app, works great with the Cisco Concentrator in our university.

[ Reply to This | # ]
What a great app...
Authored by: olivermomo on Feb 18, '06 04:24:02PM

I am surprised to hear that you are having so much trouble with the Cisco VPN client. I have implemented the Cisco VPN client on Macs and PCs at more than a dozen companies and I use the Cisco VPN client every day - I'm actually connected to a PIX firewall using the Cisco VPN on a Mac as I write this.

Several versions ago, some of my clients had errors starting the VPN client, but that hasn't been a problem in the last few versions. That said, I am looking forward to trying the improved Cisco VPN support in Apple built-in VPN client within Mac OS X 10.4.5.



[ Reply to This | # ]
What a great app...
Authored by: moritzh on Feb 19, '06 09:45:26AM

I haven't tried the latest releases of the client. I tried the first Tiger compatible version released by Cisco as well as two or so minor version number upgrades released thereafter and had the same problems will all of them. Since then I haven't bothered to try again as the other solution has been working smoothly. I might give it a try later. BTW, I made a quick test with the new built-in support for IPSec in 10.4.5 last night, but wasn't successful in getting it to work with my university network, but that may very well be because I'm not sure I know the correct settings for the "Shared Secret" (machine authentication).



[ Reply to This | # ]
10.4: A workaround for a Cisco VPN client problem
Authored by: kerbaugh on Feb 18, '06 10:59:30AM

Versions of the Cisco VPN client released more than a month after Tiger first came out have all worked for me without problems. Upgrade. As a matter of interest, Apple claims that the version of their VPN client released in the Mac OS X 10.4.5 update works with Cisco VPN. I can't confirm that because I haven't had a chance to try it yet but it would be superb if they are correct.



[ Reply to This | # ]
10.4: A workaround for a Cisco VPN client problem
Authored by: bschmidt on Feb 19, '06 10:19:04AM

I also tried OS X 10.4.5 LT2P/IPSec client in the hopes of no longer needing Cisco's VPNClient.app 4.9.00 (0050) to connect to my institution's Cisco VPN server. But I too had no success.

I couldn't figure out how to configure the GroupName and enc_GroupPwd values that I see that Cisco's VPNClient is using in my institutions .pcf aka Cisco VPNClient 'profile' file.

Could someone 'wise in the ways of VPN' shed some light on what the OS X 10.4.5 update was referring to when it mentioned improved Cisco VPN compatibility?

thx, ...be

---
...ben



[ Reply to This | # ]
Universal binary, Cisco VPN client 4.9
Authored by: plinden on Feb 24, '06 08:11:22AM
Just wanted to let you all know that the Cisco VPN client Universal Binary is out. Works no problems on my Intel iMac with OS 10.4.5. See VersionTracker for all information.

[ Reply to This | # ]
Universal binary, Cisco VPN client 4.9
Authored by: plinden on Feb 24, '06 08:12:55AM

Agh, I'm dumb, you already knew this ... I was thinking of another forum where people were asking about this.



[ Reply to This | # ]
Universal binary, Cisco VPN client 4.9
Authored by: raymond0001 on May 18, '06 03:08:43AM

Hi folks!

I just bought a new MacBook Pro and I am feeling like I have bought a Windows XP Laptop. I previously owned a G4 PPC and was connecting via GRPS and Cisco VPN Client 4.9. to the corporate VPN without problems. Now, I am strugling since more than one week and no connection occurs.

Please, please, please HELP!

And this the log with the Intel Mac:

Cisco Systems VPN Client Version 4.9.00 (0050)
Copyright (C) 1998-2005 Cisco Systems, Inc. All Rights Reserved.
Client Type(s): Mac OS X
Running on: Darwin 8.6.1 Darwin Kernel Version 8.6.1: Tue Mar 7 16:55:45 PST 2006; root:xnu-792.9.22.obj~1/RELEASE_I386 i386
Config file directory: /etc/opt/cisco-vpnclient

1 11:28:29.035 05/18/2006 Sev=Info/4 CM/0x43100002
Begin connection process

2 11:28:29.037 05/18/2006 Sev=Info/4 CM/0x43100004
Establish secure connection using Ethernet

3 11:28:29.037 05/18/2006 Sev=Info/4 CM/0x43100024
Attempt connection with server "bax-vpn-vig.baxter.com"

4 11:28:30.709 05/18/2006 Sev=Info/4 CVPND/0x43400019
Privilege Separation: binding to port: (500).

5 11:28:30.710 05/18/2006 Sev=Info/4 CVPND/0x43400019
Privilege Separation: binding to port: (4500).

6 11:28:30.710 05/18/2006 Sev=Info/6 IKE/0x4300003B
Attempting to establish a connection with 198.89.149.204.

7 11:28:31.211 05/18/2006 Sev=Warning/2 CVPND/0x83400018
Output size mismatch. Actual: 0, Expected: 237. (DRVIFACE:1319)

8 11:28:31.812 05/18/2006 Sev=Warning/2 CVPND/0x83400018
Output size mismatch. Actual: 0, Expected: 237. (DRVIFACE:1319)

9 11:28:32.414 05/18/2006 Sev=Warning/2 CVPND/0x83400018
Output size mismatch. Actual: 0, Expected: 237. (DRVIFACE:1319)

10 11:28:33.015 05/18/2006 Sev=Warning/2 CVPND/0x83400018
Output size mismatch. Actual: 0, Expected: 237. (DRVIFACE:1319)

11 11:28:33.616 05/18/2006 Sev=Warning/2 CVPND/0x83400018
Output size mismatch. Actual: 0, Expected: 237. (DRVIFACE:1319)

12 11:28:34.218 05/18/2006 Sev=Warning/2 CVPND/0x83400018
Output size mismatch. Actual: 0, Expected: 237. (DRVIFACE:1319)

13 11:28:34.218 05/18/2006 Sev=Info/4 IKE/0x43000075
Unable to acquire local IP address after 5 attempts (over 5 seconds), probably due to network socket failure.

14 11:28:34.218 05/18/2006 Sev=Warning/2 IKE/0xC300009A
Failed to set up connection data

15 11:28:34.218 05/18/2006 Sev=Info/4 CM/0x4310001C
Unable to contact server "bax-vpn-vig.baxter.com"

16 11:28:34.218 05/18/2006 Sev=Info/5 CM/0x43100025
Initializing CVPNDrv

17 11:28:34.218 05/18/2006 Sev=Info/4 CVPND/0x4340001F
Privilege Separation: restoring MTU on primary interface.

18 11:28:34.218 05/18/2006 Sev=Info/4 IKE/0x43000001
IKE received signal to terminate VPN connection

19 11:28:34.219 05/18/2006 Sev=Info/4 IPSEC/0x43700008
IPSec driver successfully started

20 11:28:34.219 05/18/2006 Sev=Info/4 IPSEC/0x43700014
Deleted all keys

21 11:28:34.219 05/18/2006 Sev=Info/4 IPSEC/0x43700014
Deleted all keys

22 11:28:34.219 05/18/2006 Sev=Info/4 IPSEC/0x43700014
Deleted all keys

23 11:28:34.219 05/18/2006 Sev=Info/4 IPSEC/0x43700014
Deleted all keys

24 11:28:34.219 05/18/2006 Sev=Info/4 IPSEC/0x4370000A
IPSec driver successfully stopped



What is the route cause?

Apple is blaming Cisco, and Cisco Apple.

I have transferred everything to the Intel Mac. Same software, but does not work!

Thanks
Raymond



[ Reply to This | # ]
10.4: A workaround for a Cisco VPN client problem
Authored by: xiao_haozi on Mar 26, '06 03:22:57PM
Hey thanks alot for the hint. I had this problem constantly with my university bundled client. I used the launchd and it works now everytime...however... i have created a script to launch the daemon and then start the client, however, i get an -sh process even after i quit that takes my cpu usage to 100%. any clue as to why this is and how i can get around this...i don't want to have to go and kill this everytime i am done and have my cpu sucked up to 100 each time im using it.

---here is my script:

#!/bin/bash
###################################
##  CIscoVPN daemon restart fix  ##
###################################

###### launch daemon #####
launchd -d /bin/sh -c \ "while [ 1 ]; do /private/opt/cisco-vpnclient/bin/cvpnd; done"

##### open vpnclient #####
open -a "VPNClient"



[ Reply to This | # ]
10.4: A workaround for a Cisco VPN client problem
Authored by: galtrucco on May 21, '07 03:09:56PM

Cisco VPN 4.9.01 and error 51: Internet connection sharing

I could not figure out what was wrong, tried multiple restart-installations etc, until I realized that I left on a connection sharing on the firewire port. After turning this off, everything worked like a charm.
Hope it helps, G.



[ Reply to This | # ]
10.4: A workaround for a Cisco VPN client problem
Authored by: mchagers on Sep 18, '07 03:00:15AM
I was also suffering from the Error 51 problem, in fact I couldn't start Cisco VPN client no matter what.
I don't run parallels, nor do I have any other of the configurations that are commonly being listed in the forums as possible causes for this error. But I still couldn't run Cisco VPN client (any version up to 4.9.01 (0080)) no matter what I tried. The infamous Error 51 kept popping up.
Note: I had disabled the firewire port in Netwok prefs, so I was unaware that the problem lay there (fw0 turned out to be active after all).
The tip in this article fixed it for me:
http://cb1inc.com/2007/06/11/fixing-cisco-vpn-client-4.9-with-parallels-desktop-3.0-on-mac-os-x



[ Reply to This | # ]
10.4: A workaround for a Cisco VPN client problem
Authored by: osxpounder on Nov 20, '08 04:45:17PM

Still very much a problem as of 11-20-08 with the VPN client version 4.9.0.1, which is the version my employer provides & requires.



[ Reply to This | # ]