Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

Vpn isa 2004 back to back Scenario

Posted on 2006-07-05
3
405 Views
Last Modified: 2013-11-16
Once again guys. Should have stuck to cisco.

Well isa backend server is set up as a vpn server. Vpn client access enabled and the vpn client access is configured to use pptp.

I then publish this server on the FE box, telling isa to listen on a particular address on the external interface.

I get error 800 enable to estabish vpn connection. when monitoring the FE server is find that a connection has being routed to the BE server which is denying it.

I checked all the rules and they looked ok. any suggestions?
0
Comment
Question by:kiddkapurcjw
3 Comments
 
LVL 1

Accepted Solution

by:
xmaveric earned 500 total points
ID: 17045530
This error can be the result of having outdated firmware on a router.

To see if this is the problem, perform a network trace. If the router advertises a 0 window size in the TCP handshake on port 1723, update the firmware.

Some other reasons this error occurs include:

The PPTP or L2TP server is not reachable. A firewall could be blocking traffic; the server name specified in your connection could be incorrect.
 
There are no free VPN ports on the server (over-subscribed - maximum number of users already connected).

1) if you have firewall, open TCP Port 1723, IP Protocol 47 (GRE).
2) make sure you can reach the VPN server by using ping.  Sometimes, poor connection can cause this issue too.
3) You may need to updated firmware on a router or firewall if other OS (win9x/nt/me/w2k) works except XP.
4) The VPN server may not be able to get IP from DHCP for the VPN client. So, you may want to re-configure VPN host networking settings. For XP pro VPN host, go to the Properties of the VPN>Network, check Specify TCP/IP address and Allow calling computer to specify its own IP address, and uncheck Assign TCP/IP addresses automatically using DHCP.
5) Make sure other secure software blocks your access, for example, if you use Norton secure software, you may need to add the remote client's IP so that the client can access.
6) If your VPN running on a Windows RRAS with NAT enabled, you may want to check the NAT settings.

Error 800 could indicate a problem with authentication. Likely causes include a firewall blocking PPTP traffic (either by your ISP or a local personal firewall such as ZoneAlarm or Tiny.)
0

Featured Post

Simplifying Server Workload Migrations

This use case outlines the migration challenges that organizations face and how the Acronis AnyData Engine supports physical-to-physical (P2P), physical-to-virtual (P2V), virtual to physical (V2P), and cross-virtual (V2V) migration scenarios to address these challenges.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Data breaches are on the rise, and companies are preparing by boosting their cybersecurity budgets. According to the Cybersecurity Market Report (http://www.cybersecurityventures.com/cybersecurity-market-report), worldwide spending on cybersecurity …
February 24, 2017 — On February 23, Travis Ormandy, a vulnerability researcher at Google, reported on Twitter (https://twitter.com/taviso/status/834900838837411840) that massive stores of data have been leaked by CloudFlare, a company that provide…
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, just open a new email message. In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
Nobody understands Phishing better than an anti-spam company. That’s why we are providing Phishing Awareness Training to our customers. According to a report by Verizon, only 3% of targeted users report malicious emails to management. With compan…

856 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question