Good day fellows: I would like to post a very specific problem that is related to Windows 7 IPsec issues. This "Networking" branch sounds pretty appropriate, but I would just like to be confirmed so I can go ahead. I see so broad issues here that I don't know whether there is another branch more appropriate. Thanks. Regards.

I would recommend Security forum instead http://social.technet.microsoft.com/Forums/en-US/w7itprosecurity/threads Rgds Milos

Hi, Whats wrong with your Windows 7 IPsec? I would glad to help you to address it.Your Name TechNet Community Support

Hello Milos, Thanks, I thought that was the case. For the moment, I'll accept Spencer's below offer. I'll explain. Regards.

Hello Spencer Xi: This is the case: I've got a product, with which I want to connect to my office from home. It's got its own VPN Client software. After the client passes through all the phases (i.e. Authentication, certificate exchange, and tunnel establishment), it then sends ICMP echo requests to the LAN interface of the remote router, but through the tunnel, it can't get the replies back. So after a few failed attempts, it surrenders and proceeds to detach from the tunnel. With XP, this is not a problem at all. But with Windows 7, I've learned that it is because the subnet mask of both ends are the same. Even when the IP addresses are completely different. My endpoint has IP addresses 172.16.x.x. with subnet mask 255.255.0.0. The remote router's LAN IP addresses are 10.49.126.x with subnet mask 255.255.255.0. The VPN client can't get back the ICMP replies. Why is that? Thanks in advance.

Hi, Please check if you enable these services under Services Manager. Secure Socket Tunneling Protocol Service.Remote Access Auto Connection Manager.Remote Access Connection Manager. Also as the reason you used the 3^rd part VPN software, I would like suggest you contact to the software provider for further help. Thank you for your understanding. Your Name TechNet Community Support

Thanks again. All those services are up and running. I forgot to mention that on another location, with another IP address (a 192.168.x.x one) it did work once. But at home it doesn't, even it's the same ISP. Unless at my location, this ISP might have some restrictions. One thing very particular, is that I login to the remote router, and the tunnel does get established. But for some reason, when the client pings the LAN interface of the remote router, it's there where it doesn't get any replies. It's like the remote router is replying to another interface. The product's provider is Cisco, but in all that Support Forum, everything points to Windows 7 as the bad boy. It has to be, because this works on another location. This worked when a fellow found out that with Windows 7, even if the IP addresses of the local and remote peers are different, if the subnet mask is the same, it won't work. But with XP it will. Why is that? Anyways, thanks. Regards.

Hi, You can try to ping the public ip address before you build the vpn connection. I suppose there may some security policies are applied in the router. Also, the issue you mentioned that the VPN software can be used in Windows XP normally. Therefore my suggestion is that you should make sure this VPN software can also be supported in Windows 7, does this software has 32bit or 64 bit edition? Finally, I am so sorry for I am not familiar with Cisco products. The only way seems contact to Cisco for help or use others product VPN software to try. Best RegardsYour Name TechNet Community Support