Skip to content

Mac, a racoon, and no more VPN connection

cisco VPN client for Mac stops working

A configuration error occured when connecting to Cisco VPN with Mac

On too many occasions my new MacBook Pro will no longer connect to my work’s  Cisco IPSec VPN.  The error message displayed is not very helpful, it simply says:

“A configuration error occured. Verify your settings and try reconnecting”

I have been unable to determine a pattern of when this happens, but it seems to occur quite often when bringing the laptop out of sleep.  Although, it does happen at other times as well.  Rebooting has appeared to help, but the whole reason I bought a Mac was because I was sick of having to reboot my PC everyday.

After a little investigation, I determined that there is a process called “racoon” which is responsible for the VPN connection.  – it performs key exchange operations to set up IPSec tunnels. The Apple MAN pages say that racoon speaks the IKE (ISAKMP/Oakley) key management protocol, to establish security associations with other hosts.  If you Kill it (using kill or activity monitor), your VPN will start working again.

You can also do :

~ :? ps -ef | grep racoon
0  5861     1   0   0:00.09 ??         0:00.15 /usr/sbin/racoon
~ :? sudo kill 5861
~ :? ps ax | grep racoon
<wait until it shuts down. sometimes you may need to SIGKILL it (kill -9 <pid>)>
~ :? sudo /usr/sbin/racoon
~ :? ps -ef | grep racoon
0  6786     1   0   0:00.08 ??         0:00.15 /usr/sbin/racoon -x

Some folks have also reported that running multiple copies of racoon can also cause the problem.  In that case, kill all.  The Mac VPN client will auto-restart as needed.

Works on OSX 10.6.5 and 10.6.6

 

3 Comments

  1. mark wrote:

    nice, worked a treat

    Tuesday, November 15, 2011 at 2:07 pm | Permalink
  2. Paul wrote:

    You can use this command to stop

    “sudo launchctl stop com.apple.racoon ”

    and

    “sudo launchctl stop com.apple.racoon ”

    to start. Hope that helps

    Wednesday, November 30, 2011 at 9:39 pm | Permalink
  3. B wrote:

    You are the man, you are the man, you are the MAN! Reboots were driving me crazy. Thanks.

    Monday, July 9, 2012 at 11:31 am | Permalink

Post a Comment

Your email is never published nor shared. Required fields are marked *
*
*