Cisco VPN client is giving error 28

[tatum]

I am running OSX 10.5.8
I am using Cisco Systems VPN Client Version 4.9.01.0180

I have imported the connection file from my Windows VPN client.

When i 'connect', i am prompted to enter my password/username as normal (Although i never normally need to enter the info twice) however, i get as far as 'Securing Communication Channels' and that's where it stops.

I've switched on the Log and this is the feedback i get:

Cisco Systems VPN Client Version 4.9.01.0180
Copyright (C) 1998-2009 Cisco Systems, Inc. All Rights Reserved.
Client Type(s): Mac OS X
Running on: Darwin 9.8.0 Darwin Kernel Version 9.8.0: Wed Jul 15 16:55:01 PDT 2009; root:xnu-1228.15.4~1/RELEASE_I386 i386
Config file directory: /etc/opt/cisco-vpnclient

1 11:24:12.666 12/03/2009 Sev=Warning/2 CVPND/0x83400011
Error -28 sending packet. Dst Addr: 0xAC1098FF, Src Addr: 0xAC109801 (DRVIFACE:1158).

2 11:24:12.666 12/03/2009 Sev=Warning/2 CVPND/0x83400011
Error -28 sending packet. Dst Addr: 0xAC102EFF, Src Addr: 0xAC102E01 (DRVIFACE:1158).

According to Cisco, the error code 28 is: The VPN client could not find a match for the search string in the log.

Does anyone have any ideas how to resolve this?

I'm aware that to grant access to the network tunnel, the server needs to be sure that the firewall is activated. I'm not sure how to do this on my Mac... but i'm as secure as possible....

Any ideas?

 

[alphaod]

What's your setup (server side)? Are you using your computer or a Cisco router?

 

[oscis]

Could be a number of things, and without logs from the gateway you're going to find it hard to resolve.

One big problem with the Mac client is that it cannot accept firewall rules pushed down from the gateway. There may also be checks for AV software versions, M$ hotfixes etc which will block you.

If you're not in control of the VPN Concentrator, the best you can do is find out your Global IP address, try connecting a couple of times and send the logs, IP address and username to your networks team.. be nice and show some flattery and you may get somewhere

I use the built in VPN client mysef and it's more stable than Cisco's client. I also created a specific group for my Macs on our VPN Concentrator..