[SimplyBea]

Hi folks

I jumped on to another 'similar thread' a couple of days ago but haven;t had any luck solving this problem so hopefully putting it out as a new thread might help.

I have to connect to my work server (Windows platform - of course) and we work through/on Citrix.

My iMac is on OS 10.5.6 and I have installed

• Cisco vpn 4.9.01 (0100)
• Citrx XenApp Plugin for Hosted Apps - version 11.0

I have to enter a security code generated by an RSA token and the status bar takes me all the way through to 'authenticating user.....' and then nothing, it does not connect.

I am able to connect via IE running in XP within VMFusion but I would just prefer to connect directly from my Mac.

Please help - I have already spent so many hours on looking for solutions and tying to make it work but it just won't!

[NoR]

Hi
I maybe can help you.
I do work with Cisco VPN and citrix connection at work.
I work for X company and i need to connect to the server of Y company to use all the application i need to work.
Now i am an IT giving support to a very big company so many times i do have connections errors as my client have.
i don´t log myself with a security code generated by an RSA because i have a card but we have also your option to log in.

Does Cisco VPN gives you and error number?
Can you tell me exactly, if you don´t have the error number, what it says about the error.

Thank you

[SimplyBea]

I just tried again and still no luck. The log doesn't seem to have any error number that I can figure out.

I guess I can't post the log as it has the IP address etc and I do not know enough about what is sensitive information....

[NoR]

humm, ok.
i just read again your post and you are trying to connect with a browser, right?
We have 2 type of connection here at work (working right now but nights are so quiet :P) we have the connection with cisco, my main connection and by a browser for who are at night and a another branch that isn´t mine :P
its weird that you don´t have any error message or number.
I will check some things while you answer back :P

[SimplyBea]

Oooops - Hope that didn't confuse you.

I have VMware Fusion on my iMac as well and run XP pro from there. In the windows OS I connect to my work server through IE7.
But the instructions for connectiong from a MAC are that I have to connect through the CISCO vpn and THIS is where I am having problems.

[NoR]

lol, yeah you confuse me a bit :P
well, never use Cisco VPN client on a Mac but on windows you have a description of what the VPN is doing at the bottom left and a pop up window with the message "reason 412" for exemple appears.

Can you send me a screenshot of the VPN only if there is no confidential info like ip or user name of course

i will PM you my email

[SimplyBea]

I have to figure out a way to do the screenshot without the connection info - have to go out now but will try later. Thanks for trying to help out.

[Huy]

Are you able to share the instructions for Mac with us?

Or maybe talk with someone from work e.g. IT Services.

[Mullarkey]

Forwarded the correct ports in your router\firewall?

I had on and off connections with the Cisco VPN software until I forwarded the correct ports.

I just selected the VPN option in my router, seems like it is forwarding UDP 500, 4500 and 1701

[NoR]

I agree with you Mullarkey.
Try to open the 10000 UDP/TCP port. we use this one too at work

[gehenna]

Would this be any help? or is it supposed to work out of the box in Leopard?

equinux - VPN Tracker

[SimplyBea]

Originally Posted by Huy

Are you able to share the instructions for Mac with us?

Or maybe talk with someone from work e.g. IT Services.

Huy - our IT dept is not Mac savvy..... they spent the better part of 2 days trying to help me sort it out.

I will see if I can do a cut and paste of the instructions here.....

[SimplyBea]

These were the instructions I received and followed for the set up..........

Page 1 of 12
Remote Network Access - Mac OS X Setup Guide
Requirements: Mac OS X version 10.4 or later
Install Citrix Client
1) Obtain Citrix Client
- Get a copy of Citrix Client for OS X from Helpdesk
Or
- download from Citrix Systems - Application Delivery Infrastructure for a Dynamic World

- Go to Downloads

Clients
- Locate Citrix XenApp section (formerly called Citrix Presentation Server)
- Locate the Macintosh section
- Click the link for OS X

- Download the latest Universal Binary version e.g. MacICA_OSX.dmg.zip
- Extract the .zip file

StuffIt Expander is a free tool for extracting archives
and can be downloaded from StuffIt unzip Expander Deluxe shareware

2) Install Citrix Client
Double-click the .dmg file to mount the disk image in the Finder
Open the Disk image in the finder and open the Citrix ICA Client application to
start the install.
Follow the on-screen instructions

Page 2 of 12

When prompted enter an Administrators Username and Password

Reboot your Mac if prompted.
Page 3 of 12
3) Open the Citrix ICA Client
Use the finder to browse to Applications
Citrix ICA Client and run the Citrix
ICA Client application.
You will be asked if you want to make a change to the Safari web browser. Click
OK to make this change.

Citrix ICA Client configuration is now complete. You can quit the application.
Page 4 of 12
Install Cisco VPN Client
1) Obtain Cisco VPN Client
Note: VPN - Virtual Private Network
Note: Users of OS X 10.5 Leopard must use client version 4.9.01.0100 or later
- Get a copy of Cisco VPN Client for OS X from Helpdesk
or
- download from Download Cisco VPN Client for Mac - Secure remote end-to-end access client. MacUpdate Mac Network Software Downloads

2) Install Citrix Client
Double-click the .dmg file to mount the disk image in the Finder
Browse to the Disk image in the Finder and open the Cisco VPN Client.mpkg
application package to start the install.
Follow the on-screen instructions

Page 5 of 12

When prompted enter an Administrators username and password.

Reboot your Mac when installation is complete.
Page 6 of 12
Configure the VPN Tunnel
1) Locate the Cisco VPN client in the finder and run the application
Applications VPN Client

2) Click the New button to create a new connection. Use the following settings:
Host: xxx.xx.xx.xxx
Name: XXXXX
Password: <The Tunnel Password Provided to you by Helpdesk>
Note: This is NOT your Windows/Citrix Username and Password

Page 7 of 12
Click on the Transport button and select to use IPSec over TCP on port 10000

Click Save to save the connection settings

Page 8 of 12
Establish the VPN Tunnel
1) Select the XXX connection and click the Connect button

2) Enter username and password
Username:
Your VPN Account username provided by Helpdesk. This is usually the
same as your Windows/Citrix login name
Password:
Enter your 4-Digit PIN code followed by the number currently displayed on
your VPN token.
If this is the first time you have used remote access then enter just the number
displayed on your VPN token. You will then be prompted to create a 4-Digit
PIN code.

Page 9 of 12
3) You are now connected to the network.
Note:
- You will find that your local Internet connection is no longer accessible your
local email, web browser, etc will not work while connected.
- If you want to access the Internet you must use Internet Explorer through
Citrix (see next section for Citrix access).
- When you have finished using Remote Access hit the Disconnect button to
terminate the VPN connection.

Page 10 of 12
Using Citrix
1) Ensure your VPN tunnel is connected

2) Open up the Safari Web Browser
Applications

Safari
Visit the following website: http://XXXXXXXXXX

Login with your Windows/Citrix Username and Password

Page 11 of 12
3) The website will attempt to detect if you have the Citrix client installed. This may
not be detected properly. Since you have installed Citrix you can click the End
Detection Process link.

Page 12 of 12
4) You will now see the Citrix applications you have access to. When you click an
icon it will automatically launch the Citrix ICA Client application and run the Citrix
application.

5) You may be prompted to allow access to the C drive.
If you click allow then your OS X Home folder will be accessible from Citrix as a
network share. This is useful to transfer files to/from home however be aware the
performance of this will be limited by the speed of your home Internet connection.

All Done!

[SimplyBea]

Originally Posted by gehenna

Would this be any help? or is it supposed to work out of the box in Leopard?

equinux - VPN Tracker

This would probably work but the $$$$ wouldn't get approved!!

[SimplyBea]

Originally Posted by Mullarkey

Forwarded the correct ports in your router\firewall?

I had on and off connections with the Cisco VPN software until I forwarded the correct ports.

I just selected the VPN option in my router, seems like it is forwarding UDP 500, 4500 and 1701

I access the internet through an AEBS - not sure if I have to change the settings there?? STrange thing is when I try to connect from XP running on my VM, I get through!

I agree with you Mullarkey.
Try to open the 10000 UDP/TCP port. we use this one too at work

That is the port I am using.......

[NoR]

with an error number everything would be much more easier

Are you sure you have done everything like you have posted before?

[SimplyBea]

Originally Posted by NoR

with an error number everything would be much more easier

Are you sure you have done everything like you have posted before?

Yes, I have followed instructions to the letter, reinstalled, rebooted....... don't know what else I can do.

The log has all sorts of numbers but I couldn't locate a specific 'error number'