The Cat Convention

Those of you who have taken the plunge into 10.7.3 on your server may have discovered (much to your dismay) that the VPN is broken.

There’s a support article on the Apple support site that will bring your VPN service back to life. Basically, you need to flip a bit on the system VPN account.

This applies to any server that was running VPN prior to the 10.7.3 update, which would be a great deal of us. The good news is… PPTP is now supposedly working. I primarily use L2TP, so I didn’t care so much about that one. But when L2TP was also broken after the 10.7.3 update, I was flummoxed.

Social Links

If you have a Lion server behind a NAT router (for example, an Airport Extreme or Time Capsule) that is running a VPN service you may have difficulties connecting to it with Windows 7 using L2TP despite the correct setup.

I won’t go into the deep dive on this now, but just a total quick tip. You need to change the encapsulation parameters on Windows 7. Do that by setting a registry key:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\PolicyAgent]

…add a new DWORD value:

“AssumeUDPEncapsulationContextOnSendRule”=dword:00000002

Social Links