8 Replies Latest reply: Feb 15, 2013 11:45 AM by JoeBidgood RSS

    VPN Clients in ePO 1st Time connection's

    garlicka

      Hi

      We have a small pocket of about 20 machines which are all remote on VPN. They all connect to the AD through VPN. I am using ePO 4.6.4 which I sync to the AD.

      Now I understand that the best way to deploy the client is 1st time by LAN however this is not possible at this time and I also understand that when on VPN that all clients as basically getting the same MAC Address so this causes confusion in the ePO.

      I have seen the KB52949 but I am little confused on that - it says that I need to get the VPN MAC Address of the Client and the Insert into the ePOVirtualMacVendor - However and please call me crazy but if all clients are getting the same VPN MAC Address won't the VPN MAC Address not be the same when I am doing the insert? Or am I missing the entire point?

       

      Thanks in advance.

        • 1. Re: VPN Clients in ePO 1st Time connection's
          alexn

          garlicka,

           

          1.Run query mentioned in this kb and you dont need to copy VPN MAC address, obviously that would be same for all clients, here you will copy the actual MAC address of your machines

          2.locate the MAC Address. Make a note of the first six digits of this MAC address in the next step (for example, 00123F21ECED).

          3.And then Modify the SQL script to add the computer to the tree:

          • 2. Re: VPN Clients in ePO 1st Time connection's
            garlicka

            Thanks Alex

            That makes more sense but I think maybe I am doing something wrong then - When I run the query - at the moment I only have 1 machine on the system since I am starting out - I get this Mac address - this is the MAC address of the Cisco VPN gives each client - I don't see another MAC address in the query of the actual machine.

            Capture.PNG

            • 3. Re: VPN Clients in ePO 1st Time connection's
              alexn

              Garlicka, it appreas either all machines are sharing same MAC or it is VPN MAC,

              Try changing  Wired MAC and Wirless MAC under Single Group Summary Table.and Run Query again.

               

              Do you see all your VPN machines under system tree or just single VPN client?

               

              Message was edited by: alexn on 2/13/13 11:00:19 AM CST
              • 4. Re: VPN Clients in ePO 1st Time connection's
                JoeBidgood
                I have seen the KB52949 but I am little confused on that - it says that I need to get the VPN MAC Address of the Client and the Insert into the ePOVirtualMacVendor - However and please call me crazy but if all clients are getting the same VPN MAC Address won't the VPN MAC Address not be the same when I am doing the insert? Or am I missing the entire point?

                 

                Thanks in advance.

                 

                What's happening here is that when a machine communicates with ePO, it checks two pieces of information - first the GUID, and then the MAC address (if the GUID is new.)

                In a VPN environment, when a machine connects for the first time, it will have a new GUID, but it will have the same MAC address as the other machines using the VPN - so ePO thinks it's the same machine with a new GUID, and does not create a new entry.

                By adding the first six characters to the ePOVirtualMacVendor table, you're telling ePO to skip the MAC address check for any machines whose MAC address starts with those six characters: this means that each machine will get its own entry in ePO, as it should.

                 

                Add 00059a to the table , as described in the article, then allow a couple of machines to connect: you should  get two separate entries.

                 

                HTH -

                 

                Joe

                • 5. Re: VPN Clients in ePO 1st Time connection's
                  garlicka

                  Ok thanks JoeBidgood

                   

                  What I did was this on the server on the cmd prompt I ran OSQL -E -S SOSEPO01\EPOSERVER -i c:\macins.sql -d ePO4_EPOSERVER - where the file macins.sql had the following in INSERT INTO ePOVirtualMacVendor (VendorID) values ('00059a')

                   

                  Once I ran it, it said 1 row affected - I am guessing that is correct.

                   

                   

                  • 6. Re: VPN Clients in ePO 1st Time connection's
                    alexn

                    Yes, it is correct.

                    • 7. Re: VPN Clients in ePO 1st Time connection's
                      garlicka

                      Thanks guys - I have added about 6 VPN clients and so far they have all played nice, all reporting good to the ePO and all in Managed mode - Joe - When you described the last bit for the VPN Mac address - that made sense - since the KB does not mention thats what it does (by passes the MAC Address)

                       

                      Thanks for your help

                      • 8. Re: VPN Clients in ePO 1st Time connection's
                        JoeBidgood

                        No problem - I will see if I can get the KB article improved to be clearer.

                         

                        Thanks -

                         

                        Joe