I've seen these articles. In this case, no user can connect from any location--so we can't blame any one remote user's home router, etc.
Main Topics
Browse All TopicsHello;
In an SBS 2003 Enterprise environment running ISA Server as the firewall and VPN endpoint, as of yesterday mid-day, suddenly no users can connect to the VPN (using the Windows built-in PPTP VPN client.) I know that ISA server can become flaky with respect to VPN connectivity, and I'm already working on getting this organization to migrate to something a little more stable (such as a Cisco ASA or WatchGuard). In the meantime, I'm having to troubleshoot this issue.
The error users get when remotely trying to connect are either error code 619 or 806, and the VPN connection hangs at "verifying username and password".
Many times in similar cases, I've either recycled the ISA related services or rebooted the ISA server entirely and the problems have gone away. This time this isn't working.
I also know that many times these error codes are a problem with PPTP or GRE being passed through one of the routers on either end. In this case, the router/firewall on the end of the VPN endpoint IS the firewall of course.
Here's a list of what I've done so far.
As of some time today, no users can VPN into SBS.
* Recycled ISA related services. Did not fix.
* Rebooted ISA/SBS server. Did not fix.
* Tested from mulitlple outside locations--does not work from any.
* Reviewed VPN and firewall policies on ISA server. No problems found.
* Reviewed event logs, no errors relating to ISA VPN found.
* Tested PPTP port inbound from canyouseeme.org. Port is open, this is not the problem.
* Created a test policy allowing all VPN-related protocols inbound, did not fix.
* Power cycled cable modem @ server side location. Did not fix.
* Used pptpclnt and pptpsrv utilities to test passing PPTP and GRE traffic--successfully transferred. (So does not appear to be an ISP protocol or port blocking issue.)
* Verified server is in RAS and IAS Servers active directory group.
* Tried enabling all protocols on SBS outside NIC--did not fix.
* Researched VPN errors 619 and 806; no additional information found.
* Reviewed list of installed MS patches for one that has been known to break ISA VPN--not installed.
* Reviewed event logs after second reboot to see if any new event have been logged--none found.
* Reviewed Dell OpenManage for any signs of hardware trouble--none found.
I'm out of ideas! Anyone have any suggestions?
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.

Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
Business Accounts
Answer for Membership
by: uetian1707Posted on 2009-06-05 at 02:07:50ID: 24554516
Hi,
/troublesh ooting/eve ntid20209. htm /vpnerrors .htm
Please read the below articles;
http://www.chicagotech.net
http://www.chicagotech.net