This topic describes how to troubleshoot problems with the virtual
private network (VPN).
Problem
Use this information
to troubleshoot problems that you are having with VPN.
Investigation
- If you are having trouble establishing the VPN
connection
- Perform the following steps to resolve the problem:
- Attempt to ping 198.74.67.235 from the master console. If you do not
receive a response:
- Ensure that you have added an additional subnet route.
- Run netstat –rn and verify that you have lines similar to the following.
Note the items in bold will differ depending on the Master Console.
Newly added: 198.74.64.0 255.255.252.0 198.74.64.21
198.74.64.21 2
Default: 198.74.64.0 255.255.255.0 198.74.64.21
198.74.64.21 1
- View the IP Security Monitor:
- From a command window on the MC, enter ipsecmon.
- If there is no information in the Security Associations window, a VPN
connection is not running.
- Click Options to increase or decrease the refresh value.
- Verify that an active tunnel is running. From the Master Console:
- Make sure that the connection manager has been started and is properly
connected
- View the IP Security Monitor.
- If the Connection Manager is attempting to connect repeatedly:
- Ensure that the connection is configured properly and that you have added
additional subnet routes.
- Check the IP Security Monitor to ensure a connection has been established.
- Stop and restart the IPSec Service from a command prompt:
net stop policyagent
net start policyagent