Juniper Network Connect VPN timeout

[Ross Wille]

I am trying to establish a VPN connection from a Windows XP client Guest OS running on VirtualBox 3.2.6 for Ubuntu 10.04 Lucid i386. The VBox NIC is configured to use bridged mode. The VPN server is Juniper Networks (using SSL protocol) and I've tried Network Connect versions 5.5.0 and 6.4.0 on Windows XP.

When I run this image under VirtualBox the following network traffic occurs:

• Client sends SYN to server:https
• Server responds with SYN,ACK
• Client ACKs the SYN,ACK
• Client sends TLSv1 Client Hello
• Server responds with TLSv1 Server Hello
• [TCP segment of a reassembled PDU]
• Client ACKs
• [TCP segment of a reassembled PDU]
• Client ACKs
• Server sends TLSv1 Certificate, Server Hello Done
• Client sends TLSv1 Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message
• Server responds with TLSv1 Change Cipher Spec, Encrypted Handshake Message
• Client ACKs
• (66 seconds of no network activity)
• Server FIN,ACKs
• Client ACKs the FIN,ACK
• Server RST,ACK

If I run this same Windows image on real hardware the VPN client establishes a VPN connection and applications can talk over that connection.

When I compare the two packet sequences, the transfers appear identical up until the 66-second timeout. But in the successful case the client begins sending and receiving TLSv1 Application Data after a 2-second pause instead of timing out.

Any ideas on what could be causing this problem?

[vasily Levchenko]

Is it repeatable with 3.2.10 (please look at ​http://www.virtualbox.org/wiki/Downloads for details)? Could you please attach the log file?