Troubleshooting VPN problems

This topic describes how to troubleshoot problems with the virtual private network (VPN).

Problem

Use this information to troubleshoot problems that you are having with VPN.

Investigation

If you are having trouble establishing the VPN connection
Perform the following steps to resolve the problem:
  1. Attempt to ping 198.74.67.235 from the master console. If you do not receive a response:
    1. Ensure that you have added an additional subnet route.
    2. Run netstat –rn and verify that you have lines similar to the following. Note the items in bold will differ depending on the Master Console.
      Newly added:    198.74.64.0    255.255.252.0     198.74.64.21    
        198.74.64.21       2
      Default:        198.74.64.0    255.255.255.0     198.74.64.21    
        198.74.64.21       1
  2. View the IP Security Monitor:
    1. From a command window on the MC, enter ipsecmon.
    2. If there is no information in the Security Associations window, a VPN connection is not running.
    3. Click Options to increase or decrease the refresh value.
  3. Verify that an active tunnel is running. From the Master Console:
    1. Make sure that the connection manager has been started and is properly connected
    2. View the IP Security Monitor.
  4. If the Connection Manager is attempting to connect repeatedly:
    1. Ensure that the connection is configured properly and that you have added additional subnet routes.
    2. Check the IP Security Monitor to ensure a connection has been established.
    3. Stop and restart the IPSec Service from a command prompt:

      net stop policyagent
      net start policyagent

Parent topic: Troubleshooting the master console

(C) Copyright IBM Corporation 2004. All Rights Reserved.