Download User Guide - TheGreenBow

Transcript
Doc.Ref
Doc.version
Version VPN
-
tgbvpn_ug_en
1.0 – Apr 2015
TheGreenBow VPN Certified
Check Phase 2 settings : VPN client address and Remote LAN address. Usually, client IP address
should not belong to the remote LAN subnet (read also What must be filled in Phase 2 field "VPN client
address" ?)
Once tunnel is up, packets are sent with ESP protocol. This protocol can be blocked by firewall. Check
that every device between the client and the VPN server does accept ESP
Check your VPN server logs. Packets can be dropped by one of its firewall rules.
Check your ISP support ESP
If you still cannot ping, follow ICMP traffic on VPN server LAN interface and on LAN computer interface
(with Ethereal for example). You will have an indication that encryption works.
Check the "default gateway" value in VPN Server LAN. A target on your remote LAN can receive pings
but does not answer because there is not "Default gateway" settings.
You cannot access to the computers in the LAN by their name. You must have specified their IP address
inside the LAN.
DELL or HP laptops with Broadcom Chipset
TheGreenBow recommends customers using a Broadcom chipset integrated with some Dell or HP laptops to
update driver bcmwl5.sys to the most recent release. This driver causes blue screen intermittently even if our
VPN Client is not installed.
Intel Adapter Switching Utility
Intel Adapter Switching Utility causes blue screen when TheGreenBow VPN Client is installed.
If you have an Intel Pro/Wireless 2100 or 2200, follow these steps in the given order.
Go to the Start/Control Panel/Add\Remove Programs. Remove the Intel PROset item
Go to the Start/Control Panel/System.
- Select the hardware tab and press the device manager button.
- In the device manager, click on the plus sign to expand the Network Adapters item.
- Select Intel PRO/Wireless LAN 2200 (or 2100) adapter and right click.
- Select Uninstall from the pop-up menu.
Restart the computer.
Upon reboot the laptop will re-detect the wireless card and install the drivers for it. It will not install the Intel
PROset drivers. The wireless card should still function, but the added functionality of the adapter switching will
not be available. Windows will then manage the wireless profiles instead of the Intel PROset utilities.
For more details, see the Intel technical advisory
I cannot uninstall VPN Client software
Problem: I cannot uninstall VPN Client software, it always asks to first uninstall the previous version.
Solution: You can use our tool to clean the remaining components of VPN Client software.
Issues with TheGreenBow drivers on Windows Vista
We strongly recommend users on Windows Vista to upgrade their network adapter drivers with Windows Update.
This action can prevent from driver crashes in some network configurations. Also, Windows Vista bug fix pack
KB938194 should be installed.
More details and download are available on http://support.microsoft.com/?kbid=938194.
Unable to open a VPN tunnel under Vista, problem with Vista Firewall?
Once TheGreenBow VPN Client installed on Vista, it might be impossible to open a VPN tunnel. The opening of
the VPN tunnel remains blocked with the following IPSec messages (use the VPN Client console):
115317 Default (SA Cnx-P1) SEND phase 1 Main Mode [SA][VID]
115319 Default (SA Cnx-P1) SEND phase 1 Main Mode [SA][VID]
This can happen on Windows Vista because the Vista Firewall can forbid IPSec communications.
TheGreenBow VPN Certified User Guide
Property of TheGreenBow © 2015
69/80