Cisco VPN :: 5512 Remote Desktop Through IPSec
Jan 22, 2013
I have a Cisco ASA 5512 device. I'm using both clientless SSL vpn. And also IPSEC which is used for our external users who connect using an IPAD and then a remote client to remote desktop into our terminal server.I created the connection using the IPSEC wizard in the ASDM software. Usually the connection works fine, but intermittently it fails to allow the user to connect using RDP.I'm able to initiate the VPN connection, and it says connected and can confirm the connection is up, however when trying to connect to the RDP server, it eventually times out. It was working fine most of the time as I say, however now I can't connect at-all.I've viewed the lgo as I try and connect and can see that my evice tries to initiate the connection, but can't quite figure out what it's trying to do. If I look at the connection in the monitoring page it says that its connected. But it's RX traffic has a value, but the TX value is 0.The interesting thing is, I can't connect, but at present have a user that is connected fine and working properly.
View 1 Replies
ADVERTISEMENT
Sep 12, 2012
We have two ASA 5500 series Firewalls running 8.4(1). One in New York, another in Atlanta.They are configured identically for simple IPSecV1 remote access for clients. Authentication is performed by an Radius server local to each site.
There are multiple IPSec Site-to-Site tunnels on these ASA's as well but those are not affected by the issues we're having.First, let me start with the famous last words, NOTHING WAS CHANGED.
All of a sudden, we were getting reports of remote users to the Atlanta ASA timing out when trying to bring up the tunnel. They would get prompted for their ID/Password, then nothing until it times out.Sames users going to the NY ASA are fine.After extensive troubleshooting, here is what I've discovered. Remote clients will authenticate fine to the Atlanta Firewall ONLY IF THEY ARE USING A WIRED CONNECTION.
If they are using the wireless adapter for their client machine, they will get stuck trying to login to Atlanta.These same clients will get into the New York ASA with no problems using wired or wireless connections.Windows 7 clients use the Shrewsoft VPN client and Mac clients use the Cisco VPN client. They BOTH BEHAVE the same way and fail to connect to the Atlanta ASA if they use their wireless adapter to initiate the connection.
Using myself as an example.
1. On my home Win 7 laptop using wireless, I can connect to the NY ASA with no issues.
2. The same creditials USED to work for Atlanta as well but have now stopped working. I get stuck until it times out.
3. I run a wire from my laptop to the FiOS router, then try again using the same credentials to Atlanta and I get RIGHT IN.
This makes absolutely no sense to me. Why would the far end of the cloud care if I have a wired or wireless network adapter? I should just be an IP address right? Again, this is beyond my scope of knowledge.We've rebuilt and moved the Radius server to another host in Atlanta in our attempts to troubleshoot to no avail. We've also rebooted the Atlanta Firewall and nothing changed.
We've tried all sorts of remote client combinations. Wireless Internet access points from different carriers (Clear, Verizon, Sprint) all exhibit the same behavior. Once I plug the laptops into a wired connection, BAM, they work connecting to Atlanta. The New York ASA is fine for wired and wireless connections. Same with some other remote office locations that we have.
Below I've detailed the syslog sequence on the Atlanta ASA for both a working wired remote connection and a failed wireless connection. At first we thought the AAA/Radius server was rejecting us but is shows the same reject message for the working connection. Again, both MAC and Windows clients show the same sequence.Where the connection fails is the "IKE Phase 1" process.
-------------------------------------------------------------------------------------------------------------------------
WORKING CONNECTION
-------------------------------------------------------------------------------------------------------------------------
%ASA-6-713172: Automatic NAT Detection Status: Remote end is|is not behind a NAT device This end is|is not behind a NAT device
NAT-Traversal auto-detected NAT.
%ASA-6-113004: AAA user aaa_type Successful: server = server_IP_address, User = user
%ASA-6-113005: AAA user authentication Rejected: reason = string: server = server_IP_address, User = user
[code]...
View 1 Replies
View Related
Mar 9, 2011
On wireless (lenovo tabletx61) I cannot connect through the intranet - no problem connecting through internet. When I manage to connect through intranet connection is dropped quite often.No problem connecting via Ethernet cables.
View 1 Replies
View Related
Mar 18, 2012
i want to create Remote IP Sec VPN on Cisco ASA5510.Problem is this 5510ASA is behind another 5520ASA and it dont have any public IP address on any of 5510 interface.if i do static NAT of ASA 5510 Private IP on internet facing 5520 IP Public POOL, then will VPN work on 5510 ASA? and what ports need to forward on 5520 for 5510 to become IPSEC VPN head end
View 1 Replies
View Related
Jan 2, 2012
Have just been trying to install Remote Desktop between two XP pro laptops When I try to log on I get a black screen with the connection bar at the top with the name of the remote computer and after about thirty seconds it drops the connection. The remote laptop comes up with logon screen but it isn't visible on the on host machine.I have followed all the instructions including file sharing enabled remote accesss etc, Both machines show up on network map and can ping each other.
View 2 Replies
View Related
Jan 7, 2012
To use Remote Desktop Connection, is it really this easy:Open up remote desktop connection on your Host PC --- type the IP of the computer you want to access, then click connect --- As long as "Allow Remote Desktop" is enabled on the PC you are trying to connect to, your attempt will be successful
View 1 Replies
View Related
Nov 20, 2011
i want give the dos printing from remote desktop to local computer on anotherlocation
View 2 Replies
View Related
Mar 8, 2013
We have a server which in addition to other services is used to stream live hi-def video from our building during special events.We use a software video/audio production mixer which works very well. But we now would like to make a change in the system.Is it possible/practical to use Remote Desktop via the second - as yet unused - LAN in our server. We really would like to put the operators in a different location where they have both video and in-person view of the event being streamed. But we don't want to use more bandwidth on the LAN...the production mixer handles a *lot* of uncompressed video and tends to be a bandwidth hog.
View 4 Replies
View Related
Sep 20, 2011
Can i build a Server through Remote Desktop using VPN, how will be the performance? Is it advisable ?
View 1 Replies
View Related
Feb 14, 2012
Is to possible to connect to someone's computer via remote desktop connection w/o them finding out what my ip is?
View 4 Replies
View Related
Dec 28, 2011
I have a home network and I routinely connect from my laptops to my wired desktop via Remote Desktop. Routinely, that is, until I replaced my old wireless router with a D-Link Wireless N router. But now, after the change, I can no longer remote desktop in. I *am* able to ping and file share with that computer, just no remote desktop.
View 3 Replies
View Related
Oct 3, 2011
I have Cisco ASA 5505 and i want to create vpn remote access ...l
so i created and connected to the vpn ...my problem is to reach my Local connection of 192.168.1.0 /24 i put the WAN Connection in the FA0/0 and put my LOCAL AREA CONNECITON into FA0/1 .. so how i can route or translate my connection , and using cisco ASDM 6.1 in GUI ,,,
View 1 Replies
View Related
Apr 5, 2012
I just made a VPN on my ASA 5505 at home, I can connect successfully to it, but I can't contact anything in the network, nothing respond to ping or to anything else (include the ASA inside IP).
View 3 Replies
View Related
Feb 29, 2012
I configured my cisco client with the info from the vpn wizard and get the following error :
error in the cisco vpn client when enabling the log : Invalid SPI size (log) + reason 412 the remote peer is no longer responding (application) message I see via the ASDM-IDM : Built inbound UDP connection for interface WAN
I'll explain briefly what I'm trying to do here :
* Remote vpn with windows users having cisco clients
* Group authentication and in the asa5510 LOCAL authentication
My WAN interface contains a public ip/29 I also defined a LAN interface with security level 100 in 10.0.60.0 255.255.252.0 range the vpn dhcp range I want to attribute to vpn users : 10.0.69.0/24
Basically I want users to initiate the vpn tunnel to the public IP and be able only to access the LAN range with the 10.0.60.0/22 range
ASA Version 8.2(5)
!
hostname xxxx
domain-name xxxx
[Code].....
View 7 Replies
View Related
Jan 22, 2011
I have A setup in different location with the the ASA Firewall with VPN enabled and a Print server. on Network B i have a server with 2008 installed and its my NAT server, DNS and File server.Now the Client on Netwrok B wants to access the Server in Network A Remotely through VPN they could connect to but cannot user Remote Desktop either its Ip translation issue or i dont know.
View 2 Replies
View Related
Apr 29, 2011
I have an internal user that needs to remote desktop to an external internet serverI can traceroute and ping from his desktop to that server. I have a Cisco 2811 that is internet facing that I think is blocking the remote desktop. It does not access lists, but has a map-policy which I am unfamiliar with and can't seem to find much when I google about doing a remote desktop on a map-policy. If you can add remote desktop as a policy or something else blocking it, or do I need to build an access list.
View 5 Replies
View Related
May 19, 2011
The other computer running XP connects to the server through remote access but the one running windows 7 does not
View 1 Replies
View Related
Jan 15, 2012
We use Nortel VPN and the problem is that it's set so when you connect to it, you can only access company resources so no Internet. To mitigate that we use vmware and run Windows XP at the same time as our Windows 7 systems. I'd love to be able to use remote desktop though and connect to a system located elsewhere even another office computer and have that one on the VPN, but of course as soon you connect the remote desktop connection goes down with it.I'm just wondering if there's any ways around this. I'm assuming not, but I'm not sure how VPN fully works. Like if I had 2 network cards in the remote system, when I VPN in does it block connections from all network cards? Ideally I'd like to use something like Amazon Web Services since their Windows Server tier has the free option which is good, or will use another VPS type system running Windows Server.
View 3 Replies
View Related
Apr 5, 2011
I opened a computer in other network via remote desktop(because I forwarded port in router)....and tried to access other computers in the network via remote desktop again from that computer but after I done, I don't know how to close the secondary remote desktop. There was one close button on the top, but if "close" it, whole rdp connection was closed. The secondary rdp connection is still open in the computer.
View 1 Replies
View Related
Feb 7, 2012
I have a PC behind a DSL router. In my PC (WinXP SP3) I have a virtual machine also running WinXP SP3. I would like to access the VM via remote desktop. Since I have a dynamic IP, I use the(url)tool to solve the problem. I installed the no-ip sync tool in the VM. Now when I write my no-ip address in the remote desktop from my office, I will access my host system, and not the hosted VM. Does any knows how I should configure things in order to get access to the virtual machine and not to the host machine
View 5 Replies
View Related
Feb 10, 2012
I have some iMacs that I manage for, in addition to my primary PC computers, such as my Toshiba Windows 7 laptop, which is what I am currently most concerned with. What I would like to do, is Remote Desktop Control (I'll abbreviate that as RDC) these mac computers through the network from my Windows PC. I am aware that this is possible with either Google Chrome, or by checking an OSX setting that will allow for VNC applications to connect, but I would prefer it if there was some way to RDC these iMacs from my Windows laptop without needing to change their settings or install software-something like how Mac-Mac RDC connections work, where I can just select a computer from the network, type a password, and go.
View 1 Replies
View Related
Jul 16, 2012
Basically, I rebuilt my network over the weekend, to include a subnet, and can no longer connect my desktop to the remote PC. My old router was reset to defaults and re-configured. My PC has been wiped, reinstalled, and fully updated.The error I receive is "Remote Desktop can't connect to the remote computer for one of these reasons: etc" I've only seen this error in the past when the PC I connect to was powered down. I have confirmed that everything is still set up properly on the PC I'm trying to connect to via an associate, and it is not powered down.
Old setup:
[My Win7 PC] ---- [old router] ---- [modem] --- [internet] ---- [Remote PC (Win 7)]
...............................| | |
.........................other local PCs
New setup:
[My Win7 PC] ---- [old router] ---- [new router] ---- [modem] --- [internet] ---- [Remote PC (Win 7)]
.........................................................| | |
...................................................other local PCs
1. I went into Windows firewall to allow Remote Desktop through, but it looks like that only needs to be set for the PC I'm trying to connect to. (Yes/No?)
2. I've forwarded port 3389 from the old router to my PC.
3. I haven't done anything yet to the new router, because I really can't tell if I'm doing the right things. The very first time I connected to the remote PC, it went right through, and I didn't have to change anything in the old router (I think - it's been awhile). I really don't know where to go from here, and it looks like the setup options I've found in the forum so far (static IP, port forwarding, Windows firewall changes, etc.) leave me with more security risks than I had on the old network, and there seem to be some conflicting opinions about the setup process.
View 2 Replies
View Related
Jun 7, 2012
I am having trouble connecting to my home computer from my work computer via the Windows Remote Desktop Connection app.On my home computer (win 7 pro) I have:
1. Allowed incoming remote desktop connections
2. Verified that the firewall is open for RDC
3. Forwarded port 3389 on my router to my devices static IP
4.Verified that I am using the correct IP (Router has a dynamic IP but I called home and had my wife read the current IP # from whatismyip.com)
5. Setup an account on the home computer that is password protected
I am connecting from a win XP pro computer.I receive 0% packet loss with reasonable time delay when pinging my home IP from the work computer.I also asked a family member to try from a different location (using Vista Ultimate) with the same result Error is that connection is never established and I am never prompted to logon to the home computer.I can connect via RDC when on the home network.
View 4 Replies
View Related
Jul 12, 2012
Is there any free tool like lanvisor ???I have 50 computers in my lan and wish to monitor all those computers during their online examinations ... I need a free tool which will autostart in all clients so that i can sit in one computer monitoring everyone.
View 1 Replies
View Related
Mar 30, 2012
REmote desktop connection times out when there is no activity, I mean I open rdp to work computer from home ,If I am away from the computer I am not using keyboard , after few minutes I get a blank screen and if it is very longthe connection times out and I have to relogin to my computer, I need suggestion on how to retain the connection so that no blank screen appears and I alos dont loose connection .
View 1 Replies
View Related
Feb 17, 2011
So i'm trying to set up remote desktop connection for my desktop at (xp pro, sp2).
I've went through all the steps:
- allowed users to connect remotely (system properties)
- added to firewall exceptions
- opened up port 3389
I've disabled firewall and virus protection for now as well to test.
It works fine when I try connecting from my laptop at home by opening up the remote desktop program, and entering the local static ip address that i've configured on the desktop (i.e. 192.168.x.x);
however, when I try to connect outside of this network (on the road or office), I can't seem to connect (yes, I replaced the ip 192.168.x.x with the public ip of the desktop which I got from whatsmyip.org). I also can't ping the public ip of the desktop (can only ping the 192.168.x.x ip of the desktop)
Again, router port is open to port 3389, firewall is turned off on both the desktop and laptop, and virus protection is off.
View 10 Replies
View Related
Mar 14, 2012
My problem is when i try and connect a printer from windows 7 that is connected to a local pc via usb onto a remote desktop it doesnt connect but when i try and connect from wins xp it does. On the remote desktop i click to add a printer and then i select network printer. Then i type\ip-address-of-pcprinter share name. It says it cannot connect to printer but when i try this method on an xp computer it accepts it.
View 6 Replies
View Related
Dec 18, 2011
I have a problem connecting to VPS with Windows XP Remote Desktop Connection.The error I'm getting is:"Remote Desktop Disconnected - The remote connection has timed out. Please try connecting to the remote computer again."I am not behind any network, firewall, router...I tried to turn off firewall and antivirus programs to see if they are blocking it. It didn't work.I could find from Microsoft support site refer to the server side configuration. But I know problem isn't with server, because I am able to connect from another PC (notebook running windows 7 with wireless connection). It is working straightforward with default settings.Are there any settings that need to be changed in Windows XP for RDC to work?
View 1 Replies
View Related
Jun 5, 2011
I am trying to use my computer running Windows XP Home to remote desktop into my computer running Windows 7 Ultimate over the internet.The computer I am trying to connect to is listening on port 3389, has all sort of firewall exceptions sorted and is enabled to accept remote connections. The computer I am trying to use to connect has no firewall currently (I have disabled it just to get this working).
And yet when I try and connect using the ip address of the host computer I receive the message "remote desktop cannot connect to the remote computer for one of the following reasons"... and so on.
View 4 Replies
View Related
Mar 30, 2012
My computer stopped being able to Remote Desktop to my server on my network. My backup software also doesn't recognize my server. But, I can access its folders using Windows Explorer. Any other PC on the network can remote desktop to the server and connect. What happened to my machine? This message appears when i try to connect: "Remote Desktop can't connect to the remote computer for one of the following reasons:
1) Remote access tot he server is not enabled
2) The remote computer is turned off
3)The remote computer is not available on the network
Make sure the remote computer is turned on and connected to the network, and that remote access is enabled."
My computer is:
AMD: Athlon 64 X2 5200+ 2991 MHz
Mobo: Gigabyte M57SLI-S4 v.2
RAM: 4GB Mushkin DDR2 PC2-6400
OS: Win 7 64bit
VC: Geforce GTX 470
View 1 Replies
View Related
Apr 19, 2011
we log into a server that has windows nt through the windows desktop. Now i want to install the hp officeject 7310 to itHow to do i go about this, do i have to install a driver?
View 1 Replies
View Related
Aug 23, 2011
Remote Desktop can't connect, so I've got four servers in the same LAN. Whenever I try remotly access the web server, the message (Remote Desktop can't connect to the remote computer for one of these reasons: 1. Remote access to the server is not enable. 2. The remote computer is turned off. 3. The remote computer is not available on the network) The thing is that I can connect to all servers with any desktop computer in the network, but when I try to do it in my laptop (that is connected to the same LAN) I've got access to the other servers but not to the web server. Sometimes I had to restart this server and works fine for a little while.
View 1 Replies
View Related
Mar 11, 2011
what will me the minimum requirement to have RDP in vpn?
View 2 Replies
View Related
