Aug 8 2009

run Cisco VPN Client 32-bit on Windows 7 64-bit

Category: zvolkov @ 13:10

IMPORTANT UPDATE: as of October 2009 I don't use this method anymore as I've switched over to free Shrew Soft VPN Client v2.1.5 running directly on my Windows 7 64-bit. Just install it and use File/Import to import your Cisco VPN Client .pcf file (from C:\Program Files\Cisco Systems\VPN Client\Profiles). If that doesn't work, see this tutorial for detailed configuration instructions. If you don't have a spare 32-bit system to temporarily install Cisco VPN client in order to get the .pcf file, read on for Windows XP Mode instructions.

As you know, Cisco VPN Client only exists in 32-bit version. As Cisco itself says on its web site, the 64-bit support is implemented only in the brand-new Cisco AnyConnect VPN Client. However, despite its name, AnyConnect will not work with old VPN-Client-compatible VPN servers! Is there any way to run good old 32-bit VPN Client on 64-bit Windows 7?

Luckily for us all, in Windows 7 Microsoft came up with this clever idea of Windows XP mode, which is nothing else but Microsoft Virtual PC prepackaged with image of Windows XP 32-bit SP3. The nicest thing about it is seamless integration between the guest and the host OSes, sort of like VMWare Fusion first pioneered. Thanks to this integration you can install Cisco VPN Client inside the virtual XP machine, and use XP's Remote Desktop Client directly from Windows 7 to access your remote workstation.

  • Then, you'll need the Cisco VPN Client (can't download from Cisco site, for security reasons, so if you didn't get this from your NOC department, just google around). Once installed inside the VM, it will magically appear in your Windows 7 Start menu, under Start \ All Programs \ Windows Virtual PC \ Windows XP Mode Applications.
  • Finally, in order to run XP's RDP client you'll need to manually publish its shortcut from XP to Windows 7. Normally, for a virtual shortcut to appear in Windows 7 you would simply copy it to XP's C:\Documents and Settings\All Users\Start Menu\Programs but that won't work for the RDP Client shortcut, because the auto-publishing feature only works for shortcuts pointing to files in C:\Program Files. To work around this limitation all you need is to copy mstsc.exe from C:\Windows\System32\ to C:\Program Files\CopyOfRdpClient\ (we talking about virtual XP C: drive here). You'll also have to copy RDP Client's dependencies at C:\Windows\System32\En-us\ to C:\Program Files\CopyOfRdpClient\En-us. Once that is done, simply create a shortcut to the C:\Program Files\CopyOfRdpClient\mstsc.exe in C:\Documents and Settings\All Users\Start Menu\Programs

  • You may want to further optimize your workflow by saving RDP Client connection to an .rdp file and publishing that to Windows 7 as well

Of course, this is a very simplistic technique. Ideally, you would want to have mstsc.exe running directly on Windows 7 while using XP's VPN connection. Do let me know if you figure that out.

NOTE: Since Windows XP SP3 includes the new version of the Terminal Services Client, you can use all 6.0 new features, particularly Mstsc.exe /span to enable multi-monitor support!

Tags:

Comments

1.
Arjen Arjen says:

What is the reason for the last step? (copying files from X to Y).

2.
zvolkov zvolkov says:

- You want to have shortcut to the XP's RDP client in your Windows 7 Start menu, right? Right!
- The way to do that is to create the shortcut in the XP start menu and that will be propagated automatically to Windows 7 start menu, right? Right!
- However, the auto-propagation only works if shortcut points to a program in Program Files, while RDP client (mstsc.exe) lives in System32, therefore auto-propagation won't work, right? Right!
- To work around this limitation we need to copy the mstsc.exe and its dependency (or create a hardlink if you know how) to a folder in Program Files and create shortcut to that new location, got it?

3.
Nicusor Socaciu Nicusor Socaciu says:

I was looking for a solution to this problem and was so happy to see Your post. So I am able to install and connect using Cisco vpn client. But ... I cannot connect using Remote Desktop ...  

4.
Matt Matt says:

Thank you thank you thank you thank you thank you zvolkov!! I'd been searching the past couple hours trying to figureout why my *%^$ing RDP shortcut and putty wasn't auto publishing to my Win7 start menu!

5.
Phil Phil says:

Rather than faffing around with doing hard links etc. you can simply remove mstsc.exe (along with anything else) from the blacklist in the registry.

You need to edit the registry on the virtual machine instance itself, hot the host.  Go to

HKLM\Software\Microsoft\Windows NT\Current Version\Virtual Machine\VPCVAppExcludeList

and remove anything you would like showing up (I also remove explorer.exe)

6.
Alexander Inglis Alexander Inglis says:

I am running Windows 7 Pro edition with Virtual PC installed. I was able to follow the suggestions above and duplicate. My corporate Cisco VPN client for VP is version 4.0.5.

On an actual XP machine -- such as netbook -- the client works perfectly provided I turn OFF Windows firewall. If I leave it on, I cannot connect.

Within the Virtual XP mode, I run into the same problem except that when I try to turn OFF the virtual Windows Firewall, it allows me to turn it off, but continues to report ON. I never get as far as connecting with the corporate server as a result.

Error: "Secure VPN Connection terminated locally by the Client. Reason 414: Failed to establish a VPN connection." I feel so near and yet so far. Any help for me? Thanks!

7.
Alex Alex says:

Hi, I tried using Virtual XP mode as well and i have the same error: "Secure VPN Connection terminated locally by the Client. Reason 414: Failed to establish a VPN connection." Any clue on how to make it work?

8.
Phillip Remaker Phillip Remaker says:

The Cisco VPN Client v5.0.7 open beta is now available
In addition to serving as a general maintenance release, the Cisco VPN Client 5.0.7 beta is compatible with Windows 7 & Windows Vista 64-bit environments.  
A 64-bit specific compatible image is available for installation on these platforms.

Please communicate feedback (both positive and problems) to cvc-beta@cisco.com.

Key Capabilities available for Beta Testing:
New Platform support – Windows 7 & Windows Vista 64-bit platform compatibility
Software Access: tools.cisco.com/.../Redirect.x?mdfid=281940730 (under 5.BETA)
Software is available for download by any customer with a Cisco.com SMARTnet™ enabled login.
Release Notes will be available next week via a link once the download image is selected.

There are currently no plans to support Windows XP 64 bit in the VPN client.

9.
Irshad Irshad says:

Thanx a lot  zvolkov for showing this option. I have installed virtual XP on my windows 7 64 bit. I have also installed VPN on XP but when i m connecting VPN cllent from windows 7 that VPN is actually connecting in Virtual XP but not in windows 7. How can we use this VPN connetion in windows 7. I have also created a RDP connection for XP in windows 7. But i dont know how to connect back. Please help.

Thanks

Irshad

10.
Irshad Irshad says:

Its working now.

thanx

Add comment


(Will show your Gravatar icon)

biuquote
  • Comment
  • Preview
Loading