up vote 0 down vote favorite
share [g+] share [fb]

I have got a strange problem obviously relating to the Cisco 1240AG Accesspoint. When I am connected to that Accesspoint, it is not possible to start a client VPN connection to any external VPN destination.

My configuration in detail: Windows 7 Pro client connected to the Cisco Aironet 1240AG Accesspoint. The Accesspoint hosts multiple SSIDs – each connected to a separate VLAN. The Accesspoint is connected to a HP Procurve switch and finally a Zywall USG 300 manages the internet access.

The problem description in detail: The connection with my clients to the WLAN works fine, surfing, pinging and so on works without any problem. But starting a VPN connection (using Windows) ends up in “verifying username and password” state with the error: the destination does not respond. If I try the same with a cheap Linksys WAP54G, connected to the same Network and same VLAN, my VPN connections work fine. This happens with PPTP VPN connections and with IPSEC VPN connections (with NCP client) as well. It seems that the Cisco Accesspoint blocks or filters die VPN packets but I cannot find a reason. Every idea is appreciated.

Thank you!

link|improve this question
Is there maybe a firewall on that device? Or is the Accesspoint controlled by a WiFi controller with a firewall? – wolfgangsz Aug 30 '10 at 12:01
Hi wolfgangsz, the accesspoint is in autonomous mode so it is not controlled by a WiFi controller. The idea with the firewall sounds good, but I would not know that a Cisco Aironet 1240AG has a firewall. If I am wrong, please tell me and how to disable it. Thank you! – user52816 Aug 30 '10 at 12:54
UPDATE: After hours I found a hint, that a bug in the installed IOS version could be the reason. So I am going to try another IOS version and will give you another update. – user52816 Aug 30 '10 at 13:29
Were you able to update the IOS to fix this issue? I believe I have run into the same problem. Would be nice to compare IOS versions if you found one that worked. Otherwise I will have to contact TAC and see what they suggest. Thanks – Thomas G Jul 7 '11 at 16:23
feedback

Know someone who can answer? Share a link to this question via email, Google+, Twitter, or Facebook.

Your Answer

 
or
required, but never shown
discard

Browse other questions tagged or ask your own question.