# SSL VPN CLIENT HELP

- Main Window
- Global Options
- Add Profile Window
- Import/Export Profile
- Status and Advanced Configuration
- Run VpnApp from command line
- Limitations
- Troubleshooting
  - Installation
  - VPN connection
  - IPsec VPN over Array SSL VPN
  - Error Codes

# Main Window

The main window displays SSL VPN basic information

Profiles tab page
The Profiles tab page dispalys all profiles and their hosts
Log tab page
The Log tab page displays connection information.
Connect Button
Once you have selected a profile, click the Connect Button to connect to the VPN server.

Top of Page

# Global Options

Auto login to Windows
Login to Windows automatically.
You can set the Windows username and password.
You can set whether lock screen after auto login.
Auto start when Windows starts
Run VPN automatically when Windows starts.
Auto Connection on launch
Establish a VPN connection automatically when standalone client is launched.
Auto Reconnect VPN Setting
Reconnect to the VPN automatically when the connection is lost.
You can set the auto reconnect interval in seconds.

Top of Page

# Add Profile Window

The add profile window allows you to add a new profile

Profile Name
The general description of the profile
Host or IP
The domain name or IP address of SSL VPN server
Proxy Settiing Button
Proxy Host
The address of proxy
Proxy Port
The port of proxy
Authentication
If you use a proxy, you can fill the username, password and domain. The standalone VPN client will input it for when the proxy server requires it.

Top of Page

# Import/Export Profile

Import/Export provides function load/save a profile from/to other.

Top of Page

# Status and Advanced Configuration

### Status

The Status window displays SSL VPN basic connection attributes and their values

Assigned IP Address
The IP address assigned by VPN Gateway for SSL VPN Tunnel
Bytes Sent
The number of bytes sent through the SSL VPN Tunnel
Bytes Received
The number of bytes received through the SSL VPN Tunnel

### Advanced Configuration

The Advanced Configuration window display current confiture information, you can maually configure it.

Virtual Network Card Options
The default MTU value is 1430, default TAF value is 2, you can re-configure it.
Tunnel Options
You can configure Tunnel options when they are enabled.

Top of Page

# Run VpnApp from command line

You may run the VpnApp from the command line. Once the VpnApp is installed please find VpnApp.exe in your installation folder.
Usage:

- To Install additional component: -install
- To Login and Connect VPN: -connect <host name> <port> <user name> <password> <1|0(ShowGUI)>
- To Disconnect VPN only: -disconnect
- To Disconnect and Logout: -logout

For example:

vpnapp ¨Cconnect www.myvpn.com 443 myname mypassword 1
This will connect and show the Array VpnApp GUI and Array icon at the system tray.

Top of Page

# Limitations

- Any changes made to proxy settings in IE while SSL VPN is active are not preserved in IE once the user disconnects VPN tunnel.

- For the shared virtual site, a user will need to include the alias name in the URL.
  For example,
  www.example_test.com/alias1

- The standalone client does not support "https://" protocol in URL. Please avoid to include it in URL!

Top of Page

# Troubleshooting

### Basic Installation and Configuration

- Error: Network adapter fails to install
  The user does not have permission to install Network Cards on the client machine. Depending on the hardware configuration, users may not have permission to install network cards even if they are local administrators.
- Error: "Network" Tab for VPN will not be displayed if the user enters wrong credentials twice when going through an ISA forward proxy. This happens with IE 5.0 browsers only.
  Reason: IE 5.0 and Active X dependency, this is a known limitation with microsoft. We recommend upgrading to IE 6.0
- Error: It takes couple of seconds to display the changes for DNS suffix search list on windows command line when using ipconfig/all command.
  Reason: It is an inherent windows limitation. You will see the changes if you wait 10 to 12 seconds.
- Warning: When SSL VPN is installed in full tunneling mode all the static routes on the client machine are overwritten so that the entire traffic goes through the SSL VPN tunnel. Some Internet Service Providers, espeically dial-up service providers, require static host routes for their beacon or keep alive packets. When Array SSL VPN is configured to use full tunneling mode, these static host routes get overwritten. This will cause the Internet connection being disconnected.
  Solution: We suggest users using these kind of ISP's use split tunneling mode. Please contact your system administrator to enable split tunneling mode.
- Warning: If client computer is using DHCP, and Array SSL VPN is using full tunneling mode or the DHCP server's IP happens to belong to one of the accessible networks through the VPN, DHCP renew will fail. If the client computer loses its actual physical IP address for this reason, the user can simply disconnect SSL VPN and then run "ipconfig /renew"(from DOS command line window) to get the IP back, and then reconnect to Array SSL VPN gateway.

### VPN connection

- Error: Failed to connect to gateway. VPN connection failed.No response from server.
  Reason: VPN server did not respond to connection request
- Error: Failed to connect to gateway. Invalid response from server
  Reason: VPN server provided invalid response
- Error: Failed to connect to gateway. Failed to negotiate policy
  Reason: Invalid configuration packet was received from VPN server
- Error: Failed to connect to gateway. Server closed the connection.
  Reason: VPN connection was terminated from the server side
- Error: Failed to connect to gateway. Error sending data to server
  Reason: VPN client failed to send data to VPN server - usually due to a closed connection
- Error: Failed to connect to gateway. Error receiving data from server.
  Reason: VPN client failed to receive data from VPN server - usually due to a closed connection.
- Error: Failed to connect to gateway. Failed to enable the VPN adapter.
  Reason: VPN adapter may be corrupted. Restart your computer and try connecting again. If problem persists, reinstall VPN client.
- Error: Failed to connect to gateway. Invalid Session ID parameter.
  Reason: Current SSL session has timed out. Relogin at Array Web Portal page and try connecting to the VPN server again.
- Error: Failed to connect. invalid session ID, check your server configuration. VPN client failed to connect.
  Reason: Your session is expired. VPN gateway will reject requests when a session is expired. Please relog into the VPN gateway and reconnect to fix this problem.
- Error: Failed to connect to Array SSL VPN server. You need to logout from SP and login again to continute. Reason: Your session is either expired or you have reached session lifetime limit or your session is killed by administrator. Please relogin again to connect to VPN gateway.
  Suggested Action: In general for the above errors you need to log out from VPN gateway, exit VpnApp application, open a new VpnApp application and attempt a new connection. If problem persists, report the problem with the error cause or error code to your Network Administrator

### IPsec over Array SSL VPN

- Error: Cisco VPN is not able to change the default route metric to more than 1 on the physical adapter in split tunneling case, because Array vpn adapter has been installed
- Error: Page display error. This error happens if both IPSec adapters and SSL VPN adapters are installed and being used on the end user client machine.
  Reason: When user clicks disconnect button on the VPN client window, VPN client will disconnect the connection and cleanup some changes made to the system. This process might take a while on some systems. Please wait until the VPN client window goes away before accessing any webpages.

### Error Codes

#### Virtual NIC Config Error

- (code 1E,0,0) Error: Failed to close Virtual NIC.
- (code 21,0,0) Error: Failed to disable Virtual NIC.
- (code 22,0,0) Error: Failed to disable Virtual NIC DHCP function.
- (code 23,0,0) Error: Failed to set Virtual NIC IP address.
- (code 24,0,0) Error: Failed to set Virtual NIC subnet.
- (code 26,0,0) Error: Failed to set Virtual NIC DNS Server.
- (code 27,0,0) Error: Failed to set Virtual NIC DNS Server in Win98 OS.
- (code 28,0,0) Error: Failed to set Virtual NIC Wins Server.
- (code 29,0,0) Error: Failed to set Virtual NIC Wins Server, because reg is protected or destroyed.
- (code 2A,0,0) Error: Failed to set Virtual NIC domain search list.
- (code 2C,0,0) Error: Failed to set Virtual NIC domain search list, because reg is protected or destroyed.
- (code 32,0,0) Error: Failed to enable adapter during setting route table.
- (code 54,0,0) Error: Failed to set Virtual NIC domain search list, because reg is protected or destroyed.
- (code 55,0,0) Error: Failed to set Virtual NIC domain search list, because reg is protected or destroyed.
- (code 56,0,0) Error: Failed to get local IP.

  #### Key to Virtual NIC error

- Simple Method: when reg is destroyed, you can set Array Virtual NIC by Windows Network Neighborhood manually and store the config. Then you can try to reconnect the gateway.
- Clean up and Reboot: if simple method does not work, you have to clean up all client components and reboot your computer. Then, you should install client components again.
- Stop Anti-Virus: Some special anti-virtus software always avoids amending reg. This will block Virtual NIC config. If it happends, you have to stop anti-virtus reg-protect function.
- Error report: If VPN client still can not work, please report to adminstrator

  #### Route Table Config Error

- (code 2D,0,0) Error: Failed to get default route for Gateway.
- (code 2E,0,0) Error: Failed to get default route for Gateway next hop.
- (code 30,0,0) Error: Failed to get System Routing.
- (code 33,0,0) Error: Failed to set route table due to non memory.
- (code 34,0,0) Error: Failed to set route table due to GetIpAddrTable failure.
- (code 36,0,0) Error: Failed to set route table due to initiating route failed
- (code 37,0,0) Error: Failed to set route table due to adding Gateway nexthop route failed.
- (code 38,0,0) Error: Failed to set route table due to adding Gateway default route failed.
- (code 39,0,0) Error: Failed to set route table due to setting metric failed.
- (code 3A,0,0) Error: Failed to set route table due to updating route failed.
- (code 57,0,0) Error: Failed to set route table due to internal error.
- (code 58,0,0) Error: Failed to set route table due to internal error.
- (code 5A,0,0) Error: Failed to set route table due to internal error.

  #### Key to Route Table error

- Stop Anti-Virus: Some special anti-virtus software always avoids amending router table. This will block route table setting. If it happends, you have to stop anti-virtus router-protect function.
- Clean up and Reboot: if stoping Anti-virtuas does not work, you have to clean up all client componenets and reboot your computer. Then, you should install client componenets again.
- Error report: If VPN client still can not work, please report to adminstrator

  #### Array Proxy Runing Error

- (code 3B,0,0) Error: Failed to write attempt for Adapter.
- (code 3C,0,0) Error: Failed to start overlapped recv for Adapter.
- (code 3D,0,0) Error: Failed to disable Adapter.
- (code 3E,0,0) Error: Failed to send data to tunnel.
- (code 3F,0,0) Error: Failed to send data to local.
- (code 40,0,0) Error: Failed to set proxy due to internal error.
- (code 41,0,0) Error: Failed to set proxy due to internal error.
- (code 42,0,0) Error: Failed to create SSL tunnel due to internal error.
- (code 43,0,0) Error: Failed to create SSL tunnel due to internal error.
- (code 44,0,0) Error: Failed to send open request.
- (code 4B,0,0) Error: Failed to set proxy due to internal error.
- (code 4C,0,0) Error: Failed to set proxy due to internal error.
- (code 4D,0,0) Error: Failed to set proxy due to internal error.
- (code 4E,0,0) Error: Failed to set proxy due to internal error.
- (code 4F,0,0) Error: Failed to set proxy due to internal error.
- (code 50,0,0) Error: Failed to set proxy due to internal error.
- (code 51,0,0) Error: Failed to set proxy due to internal error.

  #### Key to Proxy error

- Simple Method: Close all opend IE. Kill arr_proxy.exe and arr_launch.exe by windows taskmgr. Then reconnet again.
- Stop Anti-Virus: Some special anti-virtus softwares avoid amending router table. This behavior will block route table setting. If it happends, you have to stop Anti-virtus router-protect function.
- Clean up and Reboot: if stopping Anti-virus does not work, you have to clean up all client components and reboot your computer. Then, you should install client components again.
- Error report: If VPN client still can not work, please report to adminstrator

  #### Negotiate Error

- (code 45,0,0) Error: Failed to get a reply from the gateway.
- (code 46,0,0) Error: The reply got is error message.
- (code 47,0,0) Error: Failed to send get config request.
- (code 48,0,0) Error: Failed to get config reply from the gateway. May be netpool is invalid or user is not authorized.
- (code 49,0,0) Error: Get config reply is error message.
- (code 5D,0,0) Error: Virtual IP range is used up or not configured.
- (code 59,0,0) Error: Failed to get reply due to out of memory.
- (code 5B,0,0) Error: Failed to get reply due to version missing.

  #### Key to negotiate error

- Administrator should check gateway config.

Top of Page