Welcome to ISAserver.org

0x80074e24 FWX_E_CONNECTION_KILLED error when conencting VPN

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> VPN >> 0x80074e24 FWX_E_CONNECTION_KILLED error when conencting VPN

Page: [1]

Message

<< Older Topic Newer Topic >>

0x80074e24 FWX_E_CONNECTION_KILLED error when conenctin... - 11.Apr.2005 6:37:00 PM

Marsdy

Posts: 6
Joined: 11.Apr.2005
Status: offline

Hi,

I have a fairly standard ISA 2004 set up with a number of remote sites all configured with the same options for sit-to-site VPN.

Some of the site-to-site VPNs connect fine and others dont (they all connected fine using ISA 2000)

Looking at the logs, it appears that ISA 2004 is killing the connection once it is established but I can't tell why.

I have tried turning off intrusion detetcion, IP option checking in case that was the cause but to no avail.

Logs from a typical exchange are given below (with real IP addresses replaced where necessary) showing the error - any ideas what else I can try?

TCP 84.9.XX.XXX:1429 213.86.YY.YYY:1723 Local Host External Establish 0x0 Allow VPN site-to-site traffic from ISA Server PPTP
GRE 84.9.XX.XXX 213.86.YY.YYY Local Host External Establish 0x0 Allow VPN site-to-site traffic from ISA Server PPTP
TCP 84.9.XX.XXX:1429 213.86.YY.YYY:1723 Local Host External Terminate 0x80074e24 Allow VPN site-to-site traffic from ISA Server PPTP

Post #: 1

Featured Links*

RE: 0x80074e24 FWX_E_CONNECTION_KILLED error when conen... - 13.Apr.2005 12:53:00 PM

tshinder

Posts: 47644
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Marsdy,

Are your rules configured correctly to support the site to site VPN connection?

Thanks!
Tom

(in reply to Marsdy)

Post #: 2

RE: 0x80074e24 FWX_E_CONNECTION_KILLED error when conen... - 14.Apr.2005 3:33:00 PM

Marsdy

Posts: 6
Joined: 11.Apr.2005
Status: offline

Yes, I have a number of sit-to-site VPNs configured and most work and a couple dont. There is no difference between the configuration of the ones that do and dont work other than the server, name and password

(in reply to Marsdy)

Post #: 3

RE: 0x80074e24 FWX_E_CONNECTION_KILLED error when conen... - 14.Apr.2005 3:56:00 PM

remdotc

Posts: 42
Joined: 18.Feb.2005
From: Detroit, USA
Status: offline

Compair the values of
hkey_local_machine\currentcontrolset\services\tcpip\peremters
of the working VPN site to sites and the ones that do not. (assuming they are windows boxes)

(in reply to Marsdy)

Post #: 4

RE: 0x80074e24 FWX_E_CONNECTION_KILLED error when conen... - 14.Apr.2005 5:59:00 PM

Marsdy

Posts: 6
Joined: 11.Apr.2005
Status: offline

Under that key there is an "Interfaces" key and then various GUIDS but none of them appear to have any way of mapping to the RRAS entries for the VPNs

(in reply to Marsdy)

Post #: 5

RE: 0x80074e24 FWX_E_CONNECTION_KILLED error when conen... - 14.Apr.2005 9:42:00 PM

remdotc

Posts: 42
Joined: 18.Feb.2005
From: Detroit, USA
Status: offline

Actually you need to look at the values, Namely DWORD values, not the GUIDs, as the GUIDS map to virtual pointers that later map back to your NIC(s)

UseDomainNameDevolution
ForwardBroadcasts
EnableSecurityFilters
EnablePMTUDiscovery
EnableICMPRedirect
IPAutoconfigurationEnabled
NoNameReleaseOnDemand

If you are using ADS, you should also check out
string value
Domain

(in reply to Marsdy)

Post #: 6