Re: VPN ins OS X Server 10.9

Noam Birnbaum <[email protected]> Tue, 4 Mar 2014 13:40:29 -0800
Newsgroups gmane.comp.macosx.admin
Message-ID <[email protected]>
Gil has a good point, which is that PPTP is no longer considered secure. Do=
n=92t do it.

noam


On Mar 4, 2014, at 10:33 AM, Gilbert Wilson <[email protected]> wrote:

> =

> On Mar 4, 2014, at 10:00 AM, LuKreme <kremels-/[email protected]> wrote:
> =

>> On 04 Mar 2014, at 10:24 , Mauricio Tavares <[email protected]> wrote:
>>> Can you use something else as the vpn client, like a Mac laptop? Just
>>> to see where the problem might be.
>> =

>> Hmm. OK, that was unexpected. Works fine from the laptop.
>> =

>> Same settings on the iPhone just times out without connecting.
> =

> If you=92re using L2TP (and you should be!) the ipsec connection has to b=
e established first, before being passed off to the authentication phases o=
f the process. The racoon daemon establishes the ipsec tunnel and logs to s=
ystem.log, not vpnd.log. If your client is talking to the VPN server at all=
 you=92ll see some logs from racoon. vpnd also does some logging to system.=
log. So, if you=92re not seeing anything on the server side in /var/log/ppp=
/vpnd.log double-check system.log for messages from racoon and vpnd (althou=
gh from the sound of what you=92ve described I=92d hazard the guess that yo=
u=92ll only see logs from racoon, if anything at all).
> =

> As an aside, it=92s important to focus on one kind of VPN at a time. L2TP=
/IPSEC and PPTP two different beasts. From the thread it=92s not clear to m=
e which one you are using in your tests.
> =

> Gil
> =

> Gilbert Wilson
> Systems Administrator
> The Omni Group
> +1 206-523-4152
> +1 206-523-5896 (Fax)
> =

> _______________________________________________
> MacOSX-admin mailing list
> [email protected]
> http://www.omnigroup.com/mailman/listinfo/macosx-admin