Window 7 connects to VPN but not Remote Desktop

Jay Coleman · ‎03-16-2010

Hi, we just got several laptops that came with Windows 7 Pro 32bit installed, and we have installed the VPN Client 5.0.06.0110. The VPN client appears to connect to our ASA5510, but we are unable to connect to any machines on our network as it does on our XP machines. Furthermore, we cannot ping any as well. Also, while connected the Windows 7 machine is still able to access internet site as if split-tunneling was configured, which its not! I've seen alot of people posting on the internet about the same issue, but I have not run into any resolutions that work. Any ideas?

Thanks,

Jay

andrew.prince · ‎03-16-2010

Jay,

Turn logging on the client on one of the macines and post the output.

Jay Coleman · ‎03-16-2010

Here is the log:

Cisco Systems VPN Client Version 5.0.06.0110
Copyright (C) 1998-2009 Cisco Systems, Inc. All Rights Reserved.
Client Type(s): Windows, WinNT
Running on: 6.1.7600

6      18:07:10.056 03/16/10 Sev=Warning/2    CVPND/0xE3400013
AddRoute failed to add a route with metric of 0: code 160
    Destination    192.168.10.0
    Netmask    255.255.255.0
    Gateway    10.0.0.1
    Interface    10.10.85.54

7 18:07:10.056 03/16/10 Sev=Warning/2 CM/0xA3100024
Unable to add route. Network: c0a80a00, Netmask: ffffff00, Interface: a0a5536, Gateway: a000001.

8 18:08:25.839 03/16/10 Sev=Warning/2 CVPND/0xA3400015
Error with call to IpHlpApi.DLL: CheckUpVASettings: Found IPADDR entry addr=10.10.85.54, error 0

9 18:08:26.853 03/16/10 Sev=Warning/2 CVPND/0xA3400015
Error with call to IpHlpApi.DLL: CleanUpVASettings: Was able to delete all VA settings after all, error 0

10 18:08:27.258 03/16/10 Sev=Warning/2 IKE/0xA3000067
Received an IPC message during invalid state (IKE_MAIN:512)

andrew.prince · ‎03-17-2010

I have seen this issue before myself and the causes were:-

1) Running a 32bit client on 64 bit system.

2) Incorrect installation.

3) Firewall issues on software installation.

4) GPO issues on running/installing software.

HTH>

Jay Coleman · ‎03-17-2010

It appears to be a routing issue. And for some reason it works fin in XP and not Win 7. Here is some more info:

When doing a Route Print in XP I get:

XP Route Print

C:\>route print

===========================================================================

Interface List

0x1 ........................... MS TCP Loopback interface

0x2 ...00 18 de 9d 57 0a ...... Intel(R) PRO/Wireless 3945ABG Network Connection

- Teefer2 Miniport

0x3 ...00 15 58 7d 37 1e ...... Intel(R) PRO/1000 PL Network Connection - Teefer

2 Miniport

0xd0005 ...00 05 9a 3c 78 00 ...... Cisco Systems VPN Adapter - Teefer2 Miniport

===========================================================================

Active Routes:

Network Destination Netmask Gateway Interface Metric

0.0.0.0 0.0.0.0 10.10.85.58 10.10.85.58 1

0.0.0.0 0.0.0.0 192.168.10.1 192.168.10.15 20

10.0.0.0 255.0.0.0 10.10.85.58 10.10.85.58 20

10.10.85.58 255.255.255.255 127.0.0.1 127.0.0.1 20

10.255.255.255 255.255.255.255 10.10.85.58 10.10.85.58 20

65.216.134.146 255.255.255.255 192.168.10.1 192.168.10.15 1

127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1

192.168.10.0 255.255.255.0 192.168.10.15 192.168.10.15 20

192.168.10.1 255.255.255.255 192.168.10.15 192.168.10.15 1

192.168.10.15 255.255.255.255 127.0.0.1 127.0.0.1 20

192.168.10.255 255.255.255.255 192.168.10.15 192.168.10.15 20

224.0.0.0 240.0.0.0 10.10.85.58 10.10.85.58 20

224.0.0.0 240.0.0.0 192.168.10.15 192.168.10.15 20

255.255.255.255 255.255.255.255 10.10.85.58 10.10.85.58 1

255.255.255.255 255.255.255.255 192.168.10.15 192.168.10.15 1

255.255.255.255 255.255.255.255 192.168.10.15 2 1

Default Gateway: 10.10.85.58

===========================================================================

Persistent Routes:

None

When doing a Route Print in Win 7 I get:

C:\>route print
===========================================================================
Interface List
21...00 05 9a 3c 78 00 ......Cisco Systems VPN Adapter
11...00 26 9e bc ad bd ......Realtek PCIe GBE Family Controller
1...........................Software Loopback Interface 1
15...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter
12...00 00 00 00 00 00 00 e0 Microsoft 6to4 Adapter
14...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #2
16...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface
===========================================================================

IPv4 Route Table
===========================================================================
Active Routes:
Network Destination        Netmask          Gateway       Interface Metric
          0.0.0.0          0.0.0.0     192.168.10.1    192.168.10.33     20
          0.0.0.0          0.0.0.0         10.0.0.1      10.10.85.57    100
         10.0.0.0        255.0.0.0         On-link       10.10.85.57    276
      10.10.85.57 255.255.255.255         On-link       10.10.85.57    276
   10.255.255.255 255.255.255.255         On-link       10.10.85.57    276
   65.216.134.146 255.255.255.255     192.168.10.1    192.168.10.33    100
        127.0.0.0        255.0.0.0         On-link         127.0.0.1    306
        127.0.0.1 255.255.255.255         On-link         127.0.0.1    306
127.255.255.255 255.255.255.255         On-link         127.0.0.1    306
     192.168.10.0    255.255.255.0         On-link     192.168.10.33    276
     192.168.10.1 255.255.255.255         On-link     192.168.10.33    100
    192.168.10.33 255.255.255.255         On-link     192.168.10.33    276
    192.168.10.33 255.255.255.255         10.0.0.1      10.10.85.57    276
   192.168.10.255 255.255.255.255         On-link     192.168.10.33    276
   192.168.10.255 255.255.255.255         10.0.0.1      10.10.85.57    276
        224.0.0.0        240.0.0.0         On-link         127.0.0.1    306
        224.0.0.0        240.0.0.0         On-link     192.168.10.33    276
        224.0.0.0        240.0.0.0         On-link       10.10.85.57    276
255.255.255.255 255.255.255.255         On-link         127.0.0.1    306
255.255.255.255 255.255.255.255         On-link     192.168.10.33    276
255.255.255.255 255.255.255.255         On-link       10.10.85.57    276
===========================================================================
Persistent Routes:
None

I was able to make it work by doing the following command, but this is a work around, not a resoltion.

Route –p ADD 192.168.1.0 MASK 255.255.255.0 10.10.85.58 METRIC 1

Thanks,

Jay

andrew.prince · ‎03-17-2010

As I said something is stopping the client from putting the route into the machines local routing table.

mflyg · ‎04-16-2010

I get exactly the same problem today on a VPN configuration that used to work recently. The only change I can think of is that there has been a recent security update for Windows 7 on the 14th of April (KB978601, KB979683, KB981332, KB979309, KB80232) which maybe have created the problem? Messages 1 and 2 below appeared when I connected the VPN session. 3 to 6 when I disconnect. It looks like the VPN client is not allowed to add a route. Tried to run VPN client as administrator as well, but it did not help. I include the route prints before and after connecting as well.

(running 32 bit client on 32bit win7, disabled the firewall and the installation has been working before)

Cisco Systems VPN Client Version 5.0.06.0160

Client Type(s): Windows, WinNT

Running on: 6.1.7600

Config file directory: C:\Program Files\Cisco Systems\VPN Client\

1 09:47:13.903 04/16/10 Sev=Warning/2 CVPND/0xE3400013

AddRoute failed to add a route with metric of 0: code 160

Destination 10.10.21.255

Netmask 255.255.255.255

Gateway 10.0.0.1

Interface 10.1.225.161

2 09:47:13.903 04/16/10 Sev=Warning/2 CM/0xA3100024

Unable to add route. Network: a0a15ff, Netmask: ffffffff, Interface: a01e1a1, Gateway: a000001.

3 09:54:07.748 04/16/10 Sev=Warning/2 CVPND/0xA3400015

Error with call to IpHlpApi.DLL: CheckUpVASettings: Found IPADDR entry addr=10.1.225.161, error 0

4 09:54:08.751 04/16/10 Sev=Warning/2 CVPND/0xA3400015

Error with call to IpHlpApi.DLL: CheckUpVASettings: Found IPADDR entry addr=10.1.225.161, error 0

5 09:54:09.754 04/16/10 Sev=Warning/2 CVPND/0xA3400015

Error with call to IpHlpApi.DLL: CleanUpVASettings: Was able to delete all VA settings after all, error 0

6 09:54:10.377 04/16/10 Sev=Warning/2 IKE/0xA3000067

Received an IPC message during invalid state (IKE_MAIN:512)

Here is a route print before connecting:

H:\>route print

===========================================================================

Interface List

11...00 17 31 54 19 34 ......Intel(R) PRO/1000 PL Network Connection

1...........................Software Loopback Interface 1

12...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter

===========================================================================

IPv4 Route Table

===========================================================================

Active Routes:

Network Destination Netmask Gateway Interface Metric

0.0.0.0 0.0.0.0 10.10.21.254 10.10.21.75 20

10.10.21.0 255.255.255.0 On-link 10.10.21.75 276

10.10.21.75 255.255.255.255 On-link 10.10.21.75 276

10.10.21.255 255.255.255.255 On-link 10.10.21.75 276

127.0.0.0 255.0.0.0 On-link 127.0.0.1 306

127.0.0.1 255.255.255.255 On-link 127.0.0.1 306

127.255.255.255 255.255.255.255 On-link 127.0.0.1 306

224.0.0.0 240.0.0.0 On-link 127.0.0.1 306

224.0.0.0 240.0.0.0 On-link 10.10.21.75 276

255.255.255.255 255.255.255.255 On-link 127.0.0.1 306

255.255.255.255 255.255.255.255 On-link 10.10.21.75 276

===========================================================================

Persistent Routes:

None

IPv6 Route Table

===========================================================================

Active Routes:

If Metric Network Destination Gateway

1 306 ::1/128 On-link

11 276 fe80::/64 On-link

11 276 fe80::11c9:eafd:5583:f83a/128

On-link

1 306 ff00::/8 On-link

11 276 ff00::/8 On-link

===========================================================================

Persistent Routes:

None

Here is a route print after connecting

C:\>route print

===========================================================================

Interface List

16...00 05 9a 3c 78 00 ......Cisco Systems VPN Adapter

11...00 17 31 54 19 34 ......Intel(R) PRO/1000 PL Network Connection

1...........................Software Loopback Interface 1

12...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter

===========================================================================

IPv4 Route Table

===========================================================================

Active Routes:

Network Destination Netmask Gateway Interface Metric

0.0.0.0 0.0.0.0 10.10.21.254 10.10.21.75 20

0.0.0.0 0.0.0.0 10.0.0.1 10.1.225.175 21

10.0.0.0 255.0.0.0 On-link 10.1.225.175 276

10.1.225.175 255.255.255.255 On-link 10.1.225.175 276

10.10.21.0 255.255.255.0 On-link 10.10.21.75 276

10.10.21.0 255.255.255.0 10.0.0.1 10.1.225.175 276

10.10.21.75 255.255.255.255 On-link 10.10.21.75 276

10.10.21.75 255.255.255.255 10.0.0.1 10.1.225.175 276

10.10.21.201 255.255.255.255 On-link 10.10.21.75 100

10.10.21.255 255.255.255.255 On-link 10.10.21.75 276

10.255.255.255 255.255.255.255 On-link 10.1.225.175 276

127.0.0.0 255.0.0.0 On-link 127.0.0.1 306

127.0.0.1 255.255.255.255 On-link 127.0.0.1 306

127.255.255.255 255.255.255.255 On-link 127.0.0.1 306

194.20.70.220 255.255.255.255 10.10.21.254 10.10.21.75 100

224.0.0.0 240.0.0.0 On-link 127.0.0.1 306

224.0.0.0 240.0.0.0 On-link 10.10.21.75 276

224.0.0.0 240.0.0.0 On-link 10.1.225.175 276

255.255.255.255 255.255.255.255 On-link 127.0.0.1 306

255.255.255.255 255.255.255.255 On-link 10.10.21.75 276

255.255.255.255 255.255.255.255 On-link 10.1.225.175 276

===========================================================================

Persistent Routes:

Network Address Netmask Gateway Address Metric

0.0.0.0 0.0.0.0 10.0.0.1 1

===========================================================================

IPv6 Route Table

===========================================================================

Active Routes:

If Metric Network Destination Gateway

1 306 ::1/128 On-link

11 276 fe80::/64 On-link

16 276 fe80::/64 On-link

11 276 fe80::11c9:eafd:5583:f83a/128

On-link

16 276 fe80::d48f:c783:79a4:ed52/128

On-link

1 306 ff00::/8 On-link

11 276 ff00::/8 On-link

16 276 ff00::/8 On-link

===========================================================================

Persistent Routes:

None

elinvip13 · ‎08-17-2010

I have exactly the same problem. Is there a solution ?

Best regards

BD

ed.lyons · ‎09-19-2010

I am also having this problem.

Plus, I have an addtional question. Is the log message "AddRoute ... with a metric of 0" wrong, or is the VPN client really trying to use a metric of 0?

I do not think 0 is a legal value for a metric.

Ed Lyons

partnerscisco · ‎09-21-2010

Same problem here. Is there a solution ?

Windows 7 Pro, 32bit - Cisco System VPN Client Version 5.0.07.0290

Thanks

DP

Jay Coleman · ‎09-21-2010

I had to open a Cisco TAC Case to get it resolved. I wish I had more info for you guys, but the tech moved quite fast and I did not save the log by accident.

partnerscisco · ‎09-22-2010

I found a solution thats works for me:

1.Uninstall the previous version of Cisco VPN client

2.Reboot

3.Download the Citrix DNE Update and install it (or REPAIR if already installed from a previous attempt) from http://www.citrix.com/lang/English/lp/lp_1680845.asp

or use this link:

Citrix DNE - ftp://files.citrix.com/winfix.exe

32bit update - ftp://files.citrix.com/dneupdate.msi

ftp://files.citrix.com/dneupdate.msi64bit update - ftp://files.citrix.com/dneupdate64.msi

4.Reboot

5.Install the Cisco VPN Client (i use 5.0.07.0290)

7.Reboot

8.Rebuild the connection profile (previous one was no longer visible for some reason)

DP

pedraza_fernando · ‎04-24-2013

I solved the issue following David Petrik's instructions.

Thanks David.

My scenario was as follows:

Windows 7 professional 32 bits.

Cisco vpn client version 5.0.6 was installed.

Laptop connects to Cisco router 881 but cannot access LAN resources, no Remote Desktop, no ping to default gateway router interface.

Cisco VPN client worked on the laptop for a couple of months and suddenly it stopped working. The reason was not determined.

Other laptops with Windows Xp or Mac OS X worked ok.

FP

louisstein · ‎05-11-2012

change client vpn to version 5.0.04.0300 resolved problem

jawad-mukhtar · ‎02-17-2013

I Faced Such issue. WIFI Internet Router in my Home was giving my IP of 192.168.1.x subnet and after connecting to vpn client i want to access ip 192.168.1.x. So it was causing problem because i am locally connted to 1.x and after connecting to vpn client i want to access remote 1.x that was not possible. So i change my WIFI Internet Router Local Subnet to 2.x and problem was solved.

Jawad