1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Installing QuickVPN 1.1 under Windows Vista

Discussion in 'Cisco Small Business Routers and VPN Solutions' started by aviegas, Mar 16, 2007.

  1. aviegas

    aviegas Network Guru Member

    I'm trying to install QuickVPN 1.1 under Windows Vista with no success. Install "thinks" all went fine, but nothing is created except a desktop icon (shortcut) pointing to a non existent icon and executable.

    Also, any attempt to uninstall it fails. I mean... to remove the leftovers from the failed installation.

    Any clues? Yes, I've tried to run the installer in compatibility mode (XP SP2) and I'm running with UAC tuned off (User Account Control - the $#@$@#$ bugging "feature" of WinVista that asks for permission to execute the most simple tasks). So I've tried the most obvious actions.
     
  2. Macsmasher

    Macsmasher LI Guru Member

    I just got off the phone with Linksys support. I finally got through to level 2 support (at least he spoke English...level 1 could hardly talk). v1.1 doesn't support Vista.

    I suggested that it might be nice to have a note with the download stating that. And I asked why level 1 didn't know that. He had no answer.

    I am fed up with dealing with Linksys products and support. Their own support don't know their products. This isn't the first time either.

    I wonder if other manufacturers are as behind as these guys? I should've just gone with Cisco. I know Linksys is owned by them, but I hear they know what they're doing.
     
  3. aviegas

    aviegas Network Guru Member

    Coming from Linksys support I wouldn't expect anything other that that. Once they have sent me a buggy firmware for my RV042....

    That it does not "work" with Vista, well that I expect. But the real question is: is it an install problem or it will not work.

    As far as I know IPSec did not change in Vista, and given that QuickVPN is just a layer on top of that (to authenticate and set the policies) I do not see any major reason for it not working. I can see why the installation procedure would fail though.

    I will "clone" an installed copy from a XP environment to Vista and give it a try. Let's hope it does not depend too much into the Windows registry.
     
  4. aviegas

    aviegas Network Guru Member

    Well, after some digging I think this will be a hard one and I doubt that even Linksys will provide a new version of QuickVPN soon.

    First: ipseccmd.exe, that is the basis for manipulating Windows IPSec policies, is not available for Windows Vista. Instead, the functionality has moved to netsh (netsh ipsec). Another point is the dammed UAC. Managing IPSec policies requires "elevated" privileges, thus on a system with UAC on, it will generate several "can I do this" pop-ups. Or, a major rewrite will be required to "work" along the lines of UAC.

    Now comes a good question: QuickVPN is a tool typically for the road warrior type of use, commonly using a notebook. All newly acquired notebook will come with Windows Vista.

    Once I've tried to use ipseccmd directly to connect with a IPSec server (BEFVP41) but it was quite confusing and I could not get it right. If someone has a good idea on the ipseccmd commands needed to connect to a simple "responder" tunnel I'm willing to write a simple utility to work/set the policies.

    Update: for the time being I will use PPTP. I do not like it, but at least it works with Vista out of the box for the type of setup I need.
     
  5. Macsmasher

    Macsmasher LI Guru Member

    Would it be possible to use another client app with this router? For instance, Microsoft has this list:

    http://support.microsoft.com/kb/929490

    Question 2: Do I even need a client app? Is it possible to configure VPN between two Vista Ultimate computers without the client app? If it is possible, how do I configure the RVS4000?
     
  6. aviegas

    aviegas Network Guru Member

    Most of the options in that list are still under development (like probably the QuickVPN update). Also, they tend, like QuickVPN, to be quite "proprietary". Maybe a generic VPN client like Greenbow (no Vista there too).

    As for configuring without a client, yes it can be done, but it's a pain in the...
     
  7. DoormanDan

    DoormanDan Guest

    We have just upgraded our office to all newly nightmared vista business machines that connect to our rvs4000 with no update i sight for Quick VPN, Can we or has any one heard of using standard PPTP or L2TP to connect or are there propietary functions built in to "Quick VPN"
     
  8. DocLarge

    DocLarge Super Moderator Staff Member Member

    The RVS4000 does allow GRE to "pass through" it so your best bet would be to forward port 1723 from the router to your server (2000 or 2003) and configure it as a vpn server. I use this configuration alot if I'm dealing with a router that does not have an onboard pptp vpn server.

    Jay
     
  9. aviegas

    aviegas Network Guru Member

    For the time being I'm using PPTP because I can live with the 5 connections limitation. It's not bad with Vista.

    But QuickVPN uses IPSec that I think is more robust that PPTP.

    One think for sure: QuickVPN as it is will not only fail installation (and leave garbage in the registry that can't be cleaned except with REGEDIT) but will also not work.

    QuickVPN authentication is based on HTTPS so it's not hard to write code to mimic it, but the hard part is to make Vista's redesigned IPSec stack (or driver as they call it) talk to a QuickVPN capable router.

    As a matter of information, there is only one VPN client that works with Vista at this time: NCP, and it comes with it's own IPSec stack.

    No, NCP will not work with Linksys routers in dynamic IP (road warrior) mode.

    The "good news" (I hope) is that I'm trying to make it work (create a QuickVPN clone that will work under Windows Vista). Right now I can connect and pass IPSec phase-1 (main mode) authentication. But it still fails in getting a phase-2 (Quick mode) security association.

    There is a thread on this attempt, and if I succeed, I will probably need testers (I can test on a RV042, RV082 and WRV54G). Stay tunned at:

    http://www.linksysinfo.org/forums/showthread.php?t=52232
     

Share This Page