Re: NIGHTMARE - AT&T Global Network Client + Links in Virtual Private Networking

Re: NIGHTMARE - AT&T Global Network Client + Links in Virtual Private Networking http://www.dslreports.com/forum/r9391445 en Tue, 01 Dec 2009 03:56:58 EDT Tue, 01 Dec 2009 03:56:58 EDT Re: NIGHTMARE - AT&T Global Network Client + Linksys http://www.dslreports.com/forum/remark,12779740 dcmina : This thread has been extremely helpful! I have found that the Net Firewall Service is the key to gettting onto the dialer - however, I have another issue.... once checked, I am now unable to print to my local printer which is connected USB to my host computer - using a Linksys wireless router to connect via a notebook to both the internet and to the printer. Can anyone suggest how I can connect both to the ATT dialer, and be able to print? It seems that the Net Firewall Service checkbox almost is acting like an on off switch to either being able to connect with the dialer, or being able to print locally. I want to be able to do both - or am I asking for too much:)]]> http://www.dslreports.com/forum/remark,12779740 Sat, 26 Feb 2005 21:30:45 EDT Re: NIGHTMARE - AT&T Global Network Client + Linksys http://www.dslreports.com/forum/remark,12773934 anon : Thanks!! I started having the same problem myself recently ("no response from IPSEC terminator") from my AT&T client. After opening the specified ports, it worked again. not sure why it started acting up in the first place....]]> http://www.dslreports.com/forum/remark,12773934 Sat, 26 Feb 2005 01:50:20 EDT Re: NIGHTMARE - AT&T Global Network Client + Linksys http://www.dslreports.com/forum/remark,12665743 Stachel :

said by BaMoo:

I had to open udp ports 500 and 4500.

BaMoo - thank you!! I had port 500 open, but opening UDP port 4500 also seemed to do the trick for me.

My config:
Time Warner Cable Modem
Linksys 802.11A+G Version 2 router, bought yesterday
model WRT55AG V2 firmware 1.10
Pre-Shared Key (PSK) security with AES encryption

My problem symptom:
I would see AT&T Net client 5.09.2 forever looping between
Accessing digital certificate --and-- Negotiating encryption keys

What I tried that didn't work:
Login Properties --> Preferences --> Click "Override..."
Unchecked: Negotiate UDP encapsulation with VPN server for Nat traversal
That worked for someone else, but didn't work for me. So I re-checked it.

Final list of all ports that I opened
udp port 500
udp port 4500
tcp port 389
tcp port 709
tcp port 5080
tcp port 50

The other list of ports that I'm supposed to open I got from the AT&T Help Desk. They claimed they weren't supposed to be giving me support, but I pleaded.

Question:
I opened the port by
1) @ the browser »192.168.1.1
2) "Applications & Gaming" ==> port range forwarding
3) Starting on the 6'th line down, started entering all the ports, used the IP of this laptop that I'm on now as the "to IP Address", and checked "Enabled" for each row.

Is this the right way to "open the port" ?
This seemed like the most logical place to do it.

Thanks again Bamoo !!

Stachel]]> http://www.dslreports.com/forum/remark,12665743 Mon, 14 Feb 2005 04:11:21 EDT Re: NIGHTMARE - AT&T Global Network Client + Linksys http://www.dslreports.com/forum/remark,12352859 abs01 : Got it.
Need a device that allows vpn pass through.]]> http://www.dslreports.com/forum/remark,12352859 Tue, 11 Jan 2005 12:02:58 EDT Re: NIGHTMARE - AT&T Global Network Client + Linksys http://www.dslreports.com/forum/remark,12331199 abs01 : I'm using AT&T IPSec Application version 5.09.2 and a BT 512kb broadband connection to VPN.
I'm not using an adsl router.
Using Win xp pro on both laptops.

When I VPN into the company network with the connected usb modem, all is fine.
Cannot use internet connection sharing on ibm laptop as that option is not available.
Instead it states:
"windows cannot display the properties of this coeection. The windows management instrumentation (WMI) might to corrupted..."
Great!!!

I connect the usb modem to another laptop (hp) and peform the internet share option for the modem, then I hookup the other laptop (ibm), the vpn fails.

The hp laptop is the gateway.
The ibm laptop is the vpn client.
I kept getting
"negotiating encryption keys with VPN server" "authenticating..."
then the VPN server ip adress would change and again.
"negotiating encryption keys with VPN server" "authenticating..."
Internet browsing is ok on both laptops.

Don't have the option to
"Check - Allow VPN to pass through a NAT device" as an option in the preferences tab.

I don't have a Net Firewall Service check box on the hp laptop network card but do on the ibm laptop.

Tried UNCheck - Negotiate UDP encapsulation with VPN tunnel server for NAT .... but no success.

There must be a way.

Thanks for any help.]]> http://www.dslreports.com/forum/remark,12331199 Sat, 08 Jan 2005 21:04:17 EDT Re: NIGHTMARE - AT&T Global Network Client + Linksys http://www.dslreports.com/forum/remark,11674411 harrysiii : If it means anything to anyone, I use the linksys WRT54G as well, and use wireless 128 WEP with my laptop.

I have no ports open or forwarded with my router - But I think that will depend on your ATT configuration. I have the "managed VPN" settings enabled on my ATT client. If you use other methods, mine may not help you out.....

just wanted to give you my configuration before any one says it wont work for them.

any questions, let me know. i may be able to help you out.

~harry]]> http://www.dslreports.com/forum/remark,11674411 Sun, 24 Oct 2004 11:35:57 EDT Re: NIGHTMARE - AT&T Global Network Client + Linksys http://www.dslreports.com/forum/remark,11674344 harrysiii : Hey all,

Just so you know, I have noticed in the updated version of att (even the 5.0's), that you can go into "start, programs, att, att managed client firewall" and UNcheck them in there.

Here is the reason why I was looking for the reg check, but this new option overcomes it (version 6 has this option as well, but we cant use that yet at work).

anyway, we have users that would get a major delayed response on their outlook, or no response at all unless they initiated a send/receive. I noticed that if you uncheck the net-firewall, this didn't happen. The problem was, when they went home with the net-firewall unchecked, they couldn't login to ATT.

So, I was looking for the ATT reg check so I could write a script to check/uncheck this automatically as needed.

Well, a few months back we noticed that version 6 had this managed firewall, and weeks later, version 5 got it through an automatic update.

if you keep the net-firewall checked in the NIC settings (so you can connect and dont get the 101 error), you can uncheck them in the ATT firewall software settings.

This option allows all your programs to work as if you dont have the net-firewall checked, but ATT connects because the net-firewall actaully is checked.

hope this helps some. :-)]]> http://www.dslreports.com/forum/remark,11674344 Sun, 24 Oct 2004 11:26:48 EDT Re: NIGHTMARE - AT&T Global Network Client + Linksys http://www.dslreports.com/forum/remark,11672521 anon : Thanks alot ... that "net firewall" did the trick perfectly.]]> http://www.dslreports.com/forum/remark,11672521 Sun, 24 Oct 2004 01:19:18 EDT Re: NIGHTMARE - AT&T Global Network Client + Links http://www.dslreports.com/forum/remark,11625552 anon : AT&T dialer version: 5.09.2 English
Linksys wireless: WRT54g

VPN worked fine over wired connection, but when I went over wireless, I kept getting
"negotiating encryption keys with VPN server" "authenticating..."
then the VPN server ip adress would change and again.
"negotiating encryption keys with VPN server" "authenticating..."

It turns out my wireless adapter didn;t have the net firewall service checked. I reversed all the settings marked from previous threads and was able to connect.

Thanks to all for help and suggestions!]]> http://www.dslreports.com/forum/remark,11625552 Mon, 18 Oct 2004 23:41:44 EDT Re: NIGHTMARE - AT&T Global Network Client + Linksys http://www.dslreports.com/forum/remark,11541736 Sr Tech : I use the ATT client through my wireless at home. I have found if I just run 64bitWep it works fine. If I try to go higher to 128 or use some other type of protocol I seem to have issues. This is just what I have experienced, I would try with just an open wireless connection first and see if you can connect with the client. If you connect then just try to enable wep or what ever flavor of wireless security and try again. Wish I could help more.]]> http://www.dslreports.com/forum/remark,11541736 Sat, 09 Oct 2004 08:43:33 EDT Re: NIGHTMARE - AT&T Global Network Client + Linksys http://www.dslreports.com/forum/remark,11521653 jebaxter : I can connect perfectly using a wired connection on my D-Link DI 624 router, but when I try to connect through wireless, the client connect, but I cannot access any of the VPN services that I need (company email, intranet, etc.)...any suggestions?]]> http://www.dslreports.com/forum/remark,11521653 Wed, 06 Oct 2004 22:57:03 EDT Re: NIGHTMARE - AT&T Global Network Client + Linksys http://www.dslreports.com/forum/remark,10995472 anon : The VPN connection is working at last. It turned out to be the firmware. The version on it was the first release for the BEFSR81 Version 3 router. The FW release notes spoke about packets passing and some DNS issues.]]> http://www.dslreports.com/forum/remark,10995472 Sun, 08 Aug 2004 14:53:45 EDT Re: NIGHTMARE - AT&T Global Network Client + Linksys http://www.dslreports.com/forum/remark,10992988 anon : I too am having VPN-hell. I've read the thread and tried the remedies mentioned, but still no luck. I have comcast cable modem, Linksys BEFSR81 V3 (FW 2.45.5) and AT&T Client 5.09.1. The VPN connection negotiates and connects. I can ping the VPN server shown in "Show Connection Status". I can also ping the IP address assigned to my PC. However, I cannot ping/telnet/http to anything on my VPN intranet. Nor can I access anything on the internet, until I disconnect. Once I disconnect the AT&T client, my internet connection is great. Any ideas?]]> http://www.dslreports.com/forum/remark,10992988 Sun, 08 Aug 2004 05:02:56 EDT Re: NIGHTMARE - AT&T Global Network Client + Linksys http://www.dslreports.com/forum/remark,10992379 esquiber : Thanks Harry. This helped my 101 error issue as well]]> http://www.dslreports.com/forum/remark,10992379 Sun, 08 Aug 2004 01:50:30 EDT Re: NIGHTMARE - AT&T Global Network Client + Linksys http://www.dslreports.com/forum/remark,10737825 anon : make sure you have the lateset firmware from linksys installed in your router and be sure to forward teh following ports
IP port 50

UDP ports 500 and 4500

TCP ports 389, 709, 5080, 21, and 80

make sure you have enable IPSec passthru]]> http://www.dslreports.com/forum/remark,10737825 Sat, 10 Jul 2004 10:17:38 EDT Re: NIGHTMARE - AT&T Global Network Client +DLink http://www.dslreports.com/forum/remark,10736440 anon : Millions thanks :D to ML, it solved my problem too on DLINK 624+.

Right mouse click on the client (away from the normal tabs)
Select - Show login properties
Select the preferences tab
UNCheck - Negotiate UDP encapsulation with VPN tunnel server for NAT ....
Save or Apply]]> http://www.dslreports.com/forum/remark,10736440 Sat, 10 Jul 2004 01:59:44 EDT Re: NIGHTMARE - AT&T Global Network Client + Linksys http://www.dslreports.com/forum/remark,10733059 djn12313 : The never ending thread that saved my bacon.

Using the following components:

1. LINKSYS WRT54G on firmware version 2.02.8-security (this is the BETA fix they recently released).

2. AT&T Global Network Client (version 5.09.1).

The suggestion a few posts back to enable "Port Range Forwarding" on the additional ports of 5080-5080 and 3389-3389 fixed my inability to connect. I had enabled 500-500 already as well as 1723-1723 on a Linksys suggestion.

Strangely, the AT&T Global Network Firewall settings all "checked" still allowed it to work fine.

Tested the Client with the router's "DMZ" setting (Applications & Gaming > DMZ) both enabled and disabled. Both connected without issue.

Also, in the Global Network Client's "Show Login Properties" setting, I did have "Negotiate UDP Encapsulation with VPN server for NAT traversal" checked. And it worked.

The key appeared to be the port forwarding. With the correct entries it works like a charm.

Jorgen]]> http://www.dslreports.com/forum/remark,10733059 Fri, 09 Jul 2004 18:21:27 EDT Re: NIGHTMARE - AT&T Global Network Client + Linksys http://www.dslreports.com/forum/remark,10385423 anon : Was that through dialup or broadband.?]]> http://www.dslreports.com/forum/remark,10385423 Mon, 31 May 2004 14:33:39 EDT Re: NIGHTMARE - AT&T Global Network Client + Links http://www.dslreports.com/forum/remark,10366571 anon : Dude that worked like a charm!]]> http://www.dslreports.com/forum/remark,10366571 Fri, 28 May 2004 21:50:52 EDT Re: NIGHTMARE - AT&T Global Network Client + Linksys http://www.dslreports.com/forum/remark,10360467 anon : I have just install the AT&T GLobal Network Client. Try connecting and NIGHTMARE from there onwards. As soon as it shows VPN Connection Establish, it reboot my computer. Tried it on XP, Win2k. Same thing happen. ANyone have any idea???]]> http://www.dslreports.com/forum/remark,10360467 Fri, 28 May 2004 06:30:01 EDT Re: NIGHTMARE - AT&T Global Network Client + Linksys http://www.dslreports.com/forum/remark,10360287 anon : That net firewall suggestion rocked. I was pounding away at this for hours. Thanks a bunch harrysiii!]]> http://www.dslreports.com/forum/remark,10360287 Fri, 28 May 2004 04:18:47 EDT Re: NIGHTMARE - AT&T Global Network Client + Linksys http://www.dslreports.com/forum/remark,10297369 anon : I use a Linksys WAG54G router together with the latest AT&T Network Client (5.09.2) and none of the above mentioned methods worked. I still have the hanging 118 error and nither Linksys or AT&T support can help me. Is there anybody, who has a solution for a WAG54G?]]> http://www.dslreports.com/forum/remark,10297369 Fri, 21 May 2004 08:37:04 EDT Re: NIGHTMARE - AT&T Global Network Client + Linksys http://www.dslreports.com/forum/remark,10286703 gug65000 : REF: "Does any one knwo where/what the registry key is for this "net firewall" box to be checked/unchecked."

harrysiii-

If you're using IPSEC tunneling with the AT&T Global Network Client, my understanding from AT&T was that the AT&T Net Firewall feature was required (non-negotiable). When you connect using the AT&T client software, the AT&T managed VPN network would check for and require the AT&T Net Firewall to be active before completing the authentication process. PPTP tunnels on the other hand didn't require the AT&T Net Firewall to be active, but IPSEC tunnels did as part of their service offering. At least that is what I was told by an AT&T account team when I asked a similar question...]]> http://www.dslreports.com/forum/remark,10286703 Wed, 19 May 2004 23:39:26 EDT Re: NIGHTMARE - AT&T Global Network Client + Linksys http://www.dslreports.com/forum/remark,10115377 harrysiii : JellyB,

You have to have all the "net firewalls" checked in all of your network card settings. The ATT Virtual, and your pyshical hardware settings. This is the only way it will work.

To those of you getting "default gateway" error, it is because "net firewall" is not checked.

While I'm here, I have a question for you advanced users. Does any one knwo where/what the registry key is for this "net firewall" box to be checked/unchecked. I have been searching with little luck so far.]]> http://www.dslreports.com/forum/remark,10115377 Fri, 30 Apr 2004 14:35:24 EDT Re: NIGHTMARE - AT&T Global Network Client + Linksys http://www.dslreports.com/forum/remark,9990971 Lmptk : I have the same problem with AOL DSL through SBC and the Linksys BEFWS11 version 3. I called Linsys and the first guy told me to flash the firmaware. That didn't work so I called back. The next guy told me to find the receipt and call back for an exchange. I am still looking for the receipt. The problem is I cannot log into my Amex account (or any other secure site)while on the wireless BEFWS11. Any suggestions would be greatly appreciated.TY]]> http://www.dslreports.com/forum/remark,9990971 Fri, 16 Apr 2004 16:56:20 EDT Re: NIGHTMARE - AT&T Global Network Client + Links http://www.dslreports.com/forum/remark,9634909 anon : Wow, good advice on the beta utility. I uninstalled the WPC11 and drivers and ran the beta install. Now works like a charm!

Linksys FAQ: WPC11 V4 and VPN connections

»www.linksys.com/support/top10faq···ions.asp

Need PC help? »www.poasters.com great forum, great people]]> http://www.dslreports.com/forum/remark,9634909 Wed, 10 Mar 2004 08:13:35 EDT Re: NIGHTMARE - AT&T Global Network Client + Links http://www.dslreports.com/forum/remark,9544123 anon : I have a Dlink DI-614+ router, AT&T Network client 5.04, ISP Nildram. I can connect to the VPN server via the client fine. However, a couple of the programs that I use which access the VPN run incredibly slowly, particularly Outlook which pretty much comes to a grinding halt. Now, when I connect to the VPN server through my telephone line instead, it works fairly quickly (as fast as 56k can work anyway!). I have disabled Gaming Mode on my router, this did not make any different, I also opened up ports 500 and 4500 all to no effect.

A couple of things I have noticed, for some reason my laptop has a MAC Miniport Bridge installed which my network card is binded to (3com 3c5920).. if I unbind my network card from this bridge then it will still work fine under normal use, however, trying to connect to the VPN Server produces the following error "!Error 101 Missing Default Gateway MAC address.".
Another thing I have noticed is, the Net Firewall on the network card (and the bridge) is unchecked whereas it is checked on my dialup connection. However, when I check to enable the Net Firewall service on the network card and then try to connect to the VPN Server, the client just times out while trying to retrieve a list of VPN Servers.

Does anyone have any ideas ? :(]]> http://www.dslreports.com/forum/remark,9544123 Mon, 01 Mar 2004 03:37:34 EDT Re: NIGHTMARE - AT&T Global Network Client + Links http://www.dslreports.com/forum/remark,9517050 anon : I have Uniden WNR 2004 router and AT&T Network client 5.0.51. Though I opened all the ports (both TCP and UDP) on the router and disbaled UPnP, I still get
Error 118 No response from IPSEC terminator during authentication from AT&T Network Client.

Any idea, anyone? Help!

Thanks in advance.]]> http://www.dslreports.com/forum/remark,9517050 Fri, 27 Feb 2004 01:24:39 EDT Re: NIGHTMARE - AT&T Global Network Client + Links http://www.dslreports.com/forum/remark,9506620 anon : Disabling "Gaming Mode" on DLink DI-624 and ATT Global Network Client 5.07 did the trick.

Just wanted to thank everyone for the comments.]]> http://www.dslreports.com/forum/remark,9506620 Thu, 26 Feb 2004 02:43:37 EDT Re: NIGHTMARE - AT&T Global Network Client + Links http://www.dslreports.com/forum/remark,9485658 anon : I have DI-604.
Just enable the Virtual Server (IPSec). And this works.

See Advanced-->Virtual Server, and then Edit the IPSec to enter the IP address of your machine on your LAN.]]> http://www.dslreports.com/forum/remark,9485658 Tue, 24 Feb 2004 02:17:21 EDT Re: NIGHTMARE - AT&T Global Network Client + Links http://www.dslreports.com/forum/remark,9433336 anon : Thank you Marcheb! The net firewall service fixed my MTS problem with the following setup.

Win2K
Cisco 350 wireless NIC
Cisco 350 AP
MTS 5.05.1

I went back through and tried all the other options I have found, UDP checkbox, forwarding certain ports, MTU, etc... and nothing broke my access once net firewall was turned on. ]]> http://www.dslreports.com/forum/remark,9433336 Wed, 18 Feb 2004 19:39:25 EDT Re: NIGHTMARE - AT&T Global Network Client + Links http://www.dslreports.com/forum/remark,9391445 anon : I had the same troubles with AT&T Network Client and DLink DI 614+. I had to turn on the Net Firewall Service in my wireless network card properties and disable the Gaming Mode on the router (Tools, Misc); I could leave the PPTP and UPNP enabled. Thanks for all the comments, they really helped!]]> http://www.dslreports.com/forum/remark,9391445 Sat, 14 Feb 2004 17:23:44 EDT Re: NIGHTMARE - AT&T Global Network Client + Links http://www.dslreports.com/forum/remark,9377533 anon : This worked for me as well Solution using the ATT GNC. However, I only had to 'disable' the 'Gaming Mode', and left PPTP and UPNP 'enabled'. Now, my wired and wireless clients both work just fine. Thx.]]> http://www.dslreports.com/forum/remark,9377533 Fri, 13 Feb 2004 09:19:00 EDT Re: NIGHTMARE - AT&T Global Network Client + Links http://www.dslreports.com/forum/remark,9229307 anon : Thank you "Solution"

I have DLINK DI-624, AT&T GNC v5.05.1

Took your advise: "Disabled UPNP, Gaming Mode and PPTP"

Wow, works like a charm! Thank you again!]]> http://www.dslreports.com/forum/remark,9229307 Thu, 29 Jan 2004 19:19:10 EDT Re: NIGHTMARE - AT&T Global Network Client + Links http://www.dslreports.com/forum/remark,9030624 marcheb : FYI: I found this post because I switched out routers and thought that my new router kept the AT&T client from working. My connection kept trying to negotiate with the VPN servers but never connected. Not quite the same errors listed above, but the same result -- no VPN.

After digging around, I found that the "Net Firewall Service" was un-selected and needs to be selected in your network card properties.

System: Windows XP
Routers: SMC or UGate]]> http://www.dslreports.com/forum/remark,9030624 Fri, 09 Jan 2004 19:59:04 EDT Re: NIGHTMARE - AT&T Global Network Client + Links http://www.dslreports.com/forum/remark,8660514 jas28 : Solution -

what version of the ATT GNC are you using? I spoke to ATT support today and they told me that because my ISP (WOW cable) has disabled ICMP traffic, the version of the GNC that I'm using (5.04.3) cannot connect because it is waiting for a ping response (which will not happen due to ICMP traffic being disabled). They told me that any version greater than 5.05 should work as it will connect even if it doesn't get a ping response. However, I'm still stuck because my company has a "custom" version of the GNC (probably only to put their corporate header on the software) and does not yet support anything greater than 5.04.3. I'm not yet sure if I want to try to install the latest standard version available from ATT (and risk upsetting my ISS folks).

Thoughts anybody?]]> http://www.dslreports.com/forum/remark,8660514 Mon, 01 Dec 2003 21:25:52 EDT Re: NIGHTMARE - AT&T Global Network Client + Links http://www.dslreports.com/forum/remark,8551222 anon : I have Dlink 614+ router and AT&T GNC.
I was not able to connect thru wired as well as
wireless.

Disabled UPNP, Gaming Mode and PPTP. and it works!

(these are under tools->Misc)]]> http://www.dslreports.com/forum/remark,8551222 Wed, 19 Nov 2003 21:32:24 EDT Re: NIGHTMARE - AT&T Global Network Client + Linksys http://www.dslreports.com/forum/remark,8335692 anon : Thanks dittmann
Tried just installing the new beta driver (using win 2000) no go. Uninstalled the beta driver and original utility software, reinstalled the complete beta package and now everything works like a charm. Thanks again!!]]> http://www.dslreports.com/forum/remark,8335692 Sun, 26 Oct 2003 20:59:02 EDT Re: NIGHTMARE - AT&T Global Network Client + Linksys http://www.dslreports.com/forum/remark,8261490 anon : Had a same type of problems with AT&T Network Client + DLINK 707P - Changed all kind of set-up (MTU..) without success.

Finaly fixed via :

Right mouse click on the client (away from the normal tabs)
Select - Show login properties
Select the preferences tab
UNCheck - Negotiate UDP encapsulation with VPN tunnel server for NAT ....
Save or Apply

Hope this will help
Marc ]]> http://www.dslreports.com/forum/remark,8261490 Sat, 18 Oct 2003 04:47:26 EDT Re: NIGHTMARE - AT&T Global Network Client + Linksys http://www.dslreports.com/forum/remark,8205589 markdsl : Correction to the above:

Right mouse click on the client (away from the normal tabs)
Select - Show login properties
Select the preferences tab
Check - Allow VPN to pass through a NAT device
Save or Apply]]> http://www.dslreports.com/forum/remark,8205589 Sat, 11 Oct 2003 23:29:45 EDT Re: NIGHTMARE - AT&T Global Network Client + Linksys http://www.dslreports.com/forum/remark,8162068 markdsl : I had the same problem with the AT&T Global Client (version 5.04.4) and the Linksys BEFW11S4 (version 1.45. It started when my ISP - Frontiernet started blocking ICMPs and the AT&T client died (same as GIGABEAST above). Once ICMPs started working again I started getting Error 118 (No response from IPSEC terminator during authentication)as did DITTMANN (above). It didn't matter if the laptop was connected wireless or ethernet to the Linksys - it didn't work. If you bypassed the Linksys and plugged it directly into the DSL it worked perfectly. I tried defaulting the Linksys and many MTU changes as suggested by others (thanks for the suggestions).
I finally got it to work by changing the AT&T client as follows:
Right mouse click on the client (away from the normal tabs)
Select - Show login properties
Select the preferences tab
Check - Allow VPN to pass through a VPN device
Save or Apply
The AT&T client now works fine wired or wireless. I hope this helps.]]> http://www.dslreports.com/forum/remark,8162068 Mon, 06 Oct 2003 23:23:50 EDT Re: NIGHTMARE - AT&T Global Network Client + Linksys http://www.dslreports.com/forum/remark,8077788 lzrdkng : I found that Version 4 cards do not work with AT&T Global Dialer. Linksys is aware of the problem and they state that they are in the process of fixing this. I had to resort to my old Version 1 card to get wireless and AT&T to play nice with each other.]]> http://www.dslreports.com/forum/remark,8077788 Sat, 27 Sep 2003 02:57:36 EDT Re: NIGHTMARE - AT&T Global Network Client + Linksys http://www.dslreports.com/forum/remark,8069464 anon : NIGHTMARE CONTINUES...i'm trying to use same AT&T client as you, together with ZyXEL ADSL-router series 650 and can not connect into my company's intranet. The only conclusion what I'll have is that the AT&T client is piece of s#"&%t. It would be very nice if AT&T could give some explanation why building non working products.]]> http://www.dslreports.com/forum/remark,8069464 Fri, 26 Sep 2003 05:15:42 EDT Re: NIGHTMARE - AT&T Global Network Client + Linksys http://www.dslreports.com/forum/remark,7988939 anon : BT are blocking all ICMP requests from outside its network!]]> http://www.dslreports.com/forum/remark,7988939 Wed, 17 Sep 2003 06:23:42 EDT Re: NIGHTMARE - AT&T Global Network Client + Linksys http://www.dslreports.com/forum/remark,7988899 anon : Just to let everyone know.

I have just finished a conversation with BTO and they say even though they acknowledge responsibility for the failure in our VPN due to the ICMP blocking.

They will not release us from our yearly contract.

What a bunch of F@&kers!

May think about talking to oftel about this!]]> http://www.dslreports.com/forum/remark,7988899 Wed, 17 Sep 2003 06:10:21 EDT Re: NIGHTMARE - AT&T Global Network Client + Links http://www.dslreports.com/forum/remark,7945033 anon : Short version: In WinXP I added key EnablePMTUDiscovery set to TRUE & rebooted based on:
»support.microsoft.com/?scid=kb;e···Q314053
which was pointed to by this guy:
»dev.remotenetworktechnology.com/···ole.htm
who has some good info on his other pages too. BTW, many of the other optional TCP registry keys were already set by some program (ATT NetClient suspected).

Detail:
OS: WinXP, with firewall ZoneLabs Integrity Desktop v3.5.175.057.
Private LAN connected to LinkSys WRT54G with FW level v1.30.7 Jul 8 2003, with TCP & UDP port forwarding of 500-500, 5080-5080, and 3389-3389. Also enabled VPN PassThrough IPSec & PPTP.
ATT Global Dialer: AT&T IPSec Application version 5.05.1

Before adding the EnablePMTUDiscovery key, Remote Desktop was giving me the black screen with cryptic message "connection to the remote computer was broken" after ATT VPN connections were complete. I also couldn't FTP files or network folder browse to all systems.

Note I keep hearing that ISP's are reconfiguring router network settings to limit virus activity, which may be adding to end-users network woes.

Hope this helps all you folks. Good luck!]]> http://www.dslreports.com/forum/remark,7945033 Fri, 12 Sep 2003 09:41:39 EDT Re: NIGHTMARE - AT&T Global Network Client + Links http://www.dslreports.com/forum/remark,7935267 rjs1003 : I would say (guess) that either virgin are blocking the vpn protocol (so you can negotiate but not send data)
OR the virgin connection needs you to set a lower MTU... though I can't think why that would be... since it's ADSL I presume it's going over BT equipment anyway?

Try using ping to one of your intranet servers (by IP address).
If that doesn't get a response, i think you probably have the first problem. If short pings DO get a response then see you long you can make them before they stop (ping -l (that's a lower-case L).

Bob]]> http://www.dslreports.com/forum/remark,7935267 Thu, 11 Sep 2003 07:38:58 EDT Re: NIGHTMARE - AT&T Global Network Client + Linksys http://www.dslreports.com/forum/remark,7925581 anon : Has anyone had any problems running AT&T Net Client over Virgin Broadband?
I've been using the VPN software fine at home - I have a BTOpenworld connection at home and use a BT-supplied (yawn!) Westell Wirespeed DSL MODEM.
However when I take the same labtop, modem and cable to a friends house, who uses Virgin Broadband, I have serious problems. AT&T Net client connects fine, and all appears well. However when I try to do anything on my corporate network nothing happens! No e-mail or browsing of Intranet sites.
I contacted Virgin Broadband but they "do not support business use" - helpful eh?
Is it a port problem? Is it a client software problem?
Help!]]> http://www.dslreports.com/forum/remark,7925581 Wed, 10 Sep 2003 06:55:15 EDT Re: NIGHTMARE - AT&T Global Network Client + Linksys http://www.dslreports.com/forum/remark,7866589 anon : AT&T version is actually 5.05.1.]]> http://www.dslreports.com/forum/remark,7866589 Wed, 03 Sep 2003 19:31:15 EDT Re: NIGHTMARE - AT&T Global Network Client + Linksys http://www.dslreports.com/forum/remark,7866525 anon : I have a linksys BEFWS11 version 3. I have a desktop (ethernet) and laptop (wireless) running through it fine. My husband brought his laptop home from work and I am having the same problems you describe here with his AT&T program (running ethernet into router). Problem is, I tried to upgrade his software (he is running 5.00.2195) it says connection timed out before it lets me download.

His AOL connection works, but when I try to us IE, it get the "cannot find server" error message. It's almost like he cannot access any secure sites as well as his AT&T software.

Linksys says to fix the secure site problem, adjust the "MTU" but I cannot get into the router setup (under filters) b/c when I try to get into the filter tab, it says since I have AOL, I cannot access that feature.

Help! Explanations in "layman terms" please!]]> http://www.dslreports.com/forum/remark,7866525 Wed, 03 Sep 2003 19:24:24 EDT Re: NIGHTMARE - AT&T Global Network Client + Linksys http://www.dslreports.com/forum/remark,7811140 bings4 : All - Can anyone provide a definitive list of what TCP/UDP ports are required for using the AT&T VPN service?]]> http://www.dslreports.com/forum/remark,7811140 Thu, 28 Aug 2003 14:09:01 EDT Re: NIGHTMARE - AT&T Global Network Client + Linksys http://www.dslreports.com/forum/remark,7787358 gigabeast : Make sure your ISP isn't blocking ICMP ports in light of Blaster/SOBIG problems. Partial list of ISPs includes:

COX Communications Blocking ICMP Traffic

WOW - Wide Open West Blocking ICMP Traffic

ZoomTown Blocking ICMP Traffic

Winstar Blocking ICMP Traffic

Charter Communications Blocking ICMP Traffic

BT Open World - UK Blocking ICMP Traffic

Millenium Digital Blocking ICMP Traffic

Adelphia Blocking ICMP Traffic

SBC Blocking Ports 135-139-445

Comcast Blocking Ports 135-139-445

Verizon DSL No current Blocking

Optimum Online No current Blocking

Time Warner (Road Runner) No current Blocking
]]> http://www.dslreports.com/forum/remark,7787358 Tue, 26 Aug 2003 08:15:48 EDT Re: NIGHTMARE - AT&T Global Network Client + Linksys http://www.dslreports.com/forum/remark,7753449 anon : I had to open udp ports 500 and 4500. It may be differnt for you though. Good luck]]> http://www.dslreports.com/forum/remark,7753449 Fri, 22 Aug 2003 09:17:09 EDT Re: NIGHTMARE - AT&T Global Network Client + Linksys http://www.dslreports.com/forum/remark,7699504 anon : dittmann, excellent post. you saved me many hours of frustration. i loaded the driver and everything came up great. didn't need to turn off "negotiate udp". it all came up with no modifications to parms. thanks]]> http://www.dslreports.com/forum/remark,7699504 Sat, 16 Aug 2003 14:46:31 EDT Re: NIGHTMARE - AT&T Global Network Client + Linksys http://www.dslreports.com/forum/remark,7693618 anon : Success! I had the same VPN wireless connect issues with Linksys WCP11 V4 wiress PC card and BEFW11S4 V4 router. Countless hours and I have it working! The trick is to install the new wireless card driver , contained in wpc11v4_061303.zip , and found at ftp.linksys.com/beta. Extract the zip file, do an "update driver" on the wireless card, pointing it to the new driver and voila! Even works with WEP enabled. Note, in the AT&T MTS client (5.05), in "Login properties" I also had to turn off "Negotiate UDP encapsulation with VPN tunnel server for NAT traversal" . The specific failure I had been getting is Error 118 (No response from IPSEC terminator during authentication). The beta code for the wireless card, and the AT&T client setting change, were both needed to get past the autentication error and get a good connection in wireless mode.

Regards,

Frank Dittmann
]]> http://www.dslreports.com/forum/remark,7693618 Fri, 15 Aug 2003 20:32:18 EDT Re: NIGHTMARE - AT&T Global Network Client + Linksys http://www.dslreports.com/forum/remark,7611872 anon : I have a slightly more bizarre situation. I have a WAP11 router and my machine has a linksys wireless PC card. I can connect through AT&T vpn fine using the wireless connection to my router, but if I try and do it when directly connected to the router (no wireless card in machine) AT&T bombs out with a memory access problem.
Internet access is fine either way.]]> http://www.dslreports.com/forum/remark,7611872 Thu, 07 Aug 2003 08:55:13 EDT Re: NIGHTMARE - AT&T Global Network Client + Linksys http://www.dslreports.com/forum/remark,7533204 anon : I am having the same problem with AT&T Net client. The problem started when I went to a Linksys WPC11 Ver 4 PCMCIA card, the version 3 card works fine so I don't think it is the ports. I connect directly to the network through a Linux server and the pereson that manages the server informed me the port were open. I received the same response from Linksys. But I have not contacted ATT&T yet. Linksys does know they have a problem with the Version 4 card but they do not have a fix.]]> http://www.dslreports.com/forum/remark,7533204 Tue, 29 Jul 2003 17:29:35 EDT Re: NIGHTMARE - AT&T Global Network Client + Linksys http://www.dslreports.com/forum/remark,7468879 Asterix : You might have MTU issues. Try checking your MTU. Its 1370 by default for the new ATT GNC client.
--
The art of flying is to throw yourself at the ground and miss]]> http://www.dslreports.com/forum/remark,7468879 Tue, 22 Jul 2003 15:39:03 EDT Re: NIGHTMARE - AT&T Global Network Client + Linksys http://www.dslreports.com/forum/remark,7393717 anon : HELP! i am having issues with linksys wireless and AT&T Network Client. I can connect to AT&T GNC without wireless, but wireless forget about it! What settings do I need to change. It worked fine until I had to replace my card. And I think I just don't have the right setting in place! Please, help!]]> http://www.dslreports.com/forum/remark,7393717 Sun, 13 Jul 2003 22:33:53 EDT Re: NIGHTMARE - AT&T Global Network Client + Linksys http://www.dslreports.com/forum/remark,7351329 Asterix : I have been using ATT VPN client for almost 2 yrs now through Linksys routers with no issues, except once when I was using DLink 614+, but I unchecked "NAT traversal" in advanced options and shut of gaming server mode and it worked like a charm.

Download the latest version of ATT VPN Client.

»help.attbusiness.net/index.cfm?§ID=500

Let me know if you need help configuring the options.
--
The art of flying is to throw yourself at the ground and miss]]> http://www.dslreports.com/forum/remark,7351329 Wed, 09 Jul 2003 10:33:32 EDT Re: NIGHTMARE - AT&T Global Network Client + Linksys http://www.dslreports.com/forum/remark,7313960 ForLOVE : have you upgraded the firmware of befw11s4 v4? Also have you install "Dr. TCP" software and set the tcp received value to 1200..try to download this software..]]> http://www.dslreports.com/forum/remark,7313960 Fri, 04 Jul 2003 21:19:15 EDT Re: NIGHTMARE - AT&T Global Network Client + Linksys http://www.dslreports.com/forum/remark,7276690 halsaint : Did you try the DMZ setting?]]> http://www.dslreports.com/forum/remark,7276690 Mon, 30 Jun 2003 22:49:38 EDT Re: NIGHTMARE - AT&T Global Network Client + Linksys http://www.dslreports.com/forum/remark,7269173 Sr Tech : I have also have had issues with the ATT VPN client. Our company uses 5.04.3. The only routers that I have had sucsess with is the Netgear RP614, DG824m and the Zyxel B-2000. I have been through everything from fowarding almost every port to hosting a DMZ port. The issues I had is that you can log in to the VPN service but you then loose all tcpip services, then when you log out everything comes back. Then I have had where you log in to the VPN, I get the tcpip services but cannot see any netowrk drives or save attachments from outlook email. If you have the ability I would try another router if you have not done so all ready. The 2 netgears I would stay away from and have had issues with while trying to use the ATT client are the FM114P and the DG814. Hope this helps I understand the fustration..
[text was edited by author 2003-06-30 11:22:03]
]]> http://www.dslreports.com/forum/remark,7269173 Mon, 30 Jun 2003 07:07:38 EDT Re: NIGHTMARE - AT&T Global Network Client + Linksys http://www.dslreports.com/forum/remark,7262178 anon : ...and i am using comcast as my internet provider via cable modem. ]]> http://www.dslreports.com/forum/remark,7262178 Sun, 29 Jun 2003 12:30:40 EDT NIGHTMARE - AT&T Global Network Client + Linksys http://www.dslreports.com/forum/remark,7262023 anon : I am using Linksys' Wireless Broadband Router (Model No. BEFW11S4 Version 4). Internet connection is fine.

However, when I try to get on to my company's VPN using the AT&T Network Client (v5.05.1), it's not working.

This is a freaking NIGHTMARE. In the last two days, I have spent 4 hours + on the phone with Linksys. They have been very committed and helpful, but they don't have the answers. They are asking me to ask AT&T what the ports are that need to be opened in order for the two products to work together.

Worst part is that I had my VPN working on my prior (wired) Linksys Router (Model No. BEFSR41).

What gives? What do I do? Will this ever work? Is the port idea going to work? ]]> http://www.dslreports.com/forum/remark,7262023 Sun, 29 Jun 2003 12:08:01 EDT