Problem specific to Windows XP and VPN's

[pmacdanel]

Hello,

We are having a real problem with a Windows XP pro machine authenticating back to a Win2K server across a 1710 to 1710 VPN. Wins is in place across the network, and all the other Win machines authenticate fine. 98, ME, 2K all join the domain with no problem. When XP pro tries we get the following error:

"The semaphore time out period has expired"

Does anyone know of any specific problems with XP and domain auth. across a VPN ?

[ciscomoderator]

Since there has been no response to your post, it appears to be either too complex or too rare an issue for other forum members to assist you. If you don't get a suitable response to your post, you may wish to review our resources at the online Technical Assistance Center (http://www.cisco.com/tac) or speak with a TAC engineer. You can open a TAC case online at http://www.cisco.com/tac/caseopen

If anyone else in the forum has some advice, please reply to this thread.

Thank you for posting.

[rinelson]

Haven't seen this but in doing research on a client to pix vpn problem I ran into a statement stating if an app doesn't work accross the vpn try lower the MTU.

[pmacdanel]

Thanks, we'll give it a try...

[crichardson]

My understanding is that Win XP does not have a client that works with 3des which I am assuming you are running. We saw the same prob and we are using DES instead of 3DES to solve that problem. Now XP authenticates unfortunately, lower security.

[pmacdanel]

We are trying to domain authenticate a windows XP machine to a win2k server across a site to site VPN, I'm not sure what you mean by client ?

thanks

[crichardson]

Sorry for not being clear. What we are seeing is that the Cisco VPN Client won't run on Win XP when we use 3DES. All others using w2k and 98 authenticates but XP fails but works on DES fine.

Chris