Welcome to ISAserver.org
Forums |
Register |
Login |
My Profile |
Inbox |
RSS 
|
My Subscription |
My Forums |
Address Book |
Member List |
Search |
FAQ |
Ticket List |
Log Out
Getting Error (Urgent)
|
Users viewing this topic:
none
|
Logged in as: Guest
|
Login  | |
|
Getting Error (Urgent) - 7.Aug.2007 10:56:01 AM
|
|
|
create_share
Posts: 256
Joined: 4.May2005
Status: offline
|
I was able to connect to my ISA Server from Internet through VPN. But i don't know what is changed and i have started getting this error:
"Error 800: Unable to establish the VPN connection. The VPN server may be unreachable, or security parameters may not be configured properly for this connection".
My ISA Server is joined to domain. I am using MSCHAP-v2 Encryption method with PPTP.
Thankx!
|
|
|
|
RE: Getting Error (Urgent) - 7.Aug.2007 2:29:58 PM
|
|
|
spouseele
Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline
|
Hi create_share ,
is the PPTP control port reachable? You can test it easily with the command 'telnet VPN_Server 1723'. The connection should succeed.
HTH,
Stefaan
|
|
|
|
|
RE: Getting Error (Urgent) - 7.Aug.2007 3:48:46 PM
|
|
|
create_share
Posts: 256
Joined: 4.May2005
Status: offline
|
yes it is reachable but still can't connect VPN.
thankx!
|
|
|
|
|
RE: Getting Error (Urgent) - 7.Aug.2007 4:16:19 PM
|
|
|
spouseele
Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline
|
Hi create_share,
two suggestions:
1. if possible test from a workstation directly connected to the same segment as the ISA external interface. That should exclude all external dependencies.
2. take a network monitor trace to find out how far the PPTP call setup goes. Check out my blog Multiple PPTP VPN clients behind a NAT device for some tips to interpret that trace.
HTH,
Stefaan
|
|
|
|
|
RE: Getting Error (Urgent) - 8.Aug.2007 2:37:10 AM
|
|
|
create_share
Posts: 256
Joined: 4.May2005
Status: offline
|
Yes! i connected the external interface directly to my Notebook computer and checked the vpn. It is giving same error. Can it be because of authentication. My isa is joined to domain.
Thankx!
|
|
|
|
|
RE: Getting Error (Urgent) - 8.Aug.2007 3:13:31 PM
|
|
|
spouseele
Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline
|
Hi create_share,
what about my second suggestion?
HTH,
Stefaan
|
|
|
|
|
RE: Getting Error (Urgent) - 9.Aug.2007 1:09:38 PM
|
|
|
create_share
Posts: 256
Joined: 4.May2005
Status: offline
|
I have noticed one thing before i go for the trace. I dialed the VPN Connection and checked the log of ISA where i found an entry of
"PPTP Initiated Connection with Rule Name of "[System] Allow VPN Client traffic to ISA Server, Source Network (External) " with my Dial-Up connection IP Address that i am getting from my ISP".
This means that it is reaching there but after that it is being rejected due to some reason.
Thankx!
|
|
|
|
|
RE: Getting Error (Urgent) - 9.Aug.2007 3:15:00 PM
|
|
|
spouseele
Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline
|
Hi create_share,
don't you have a static IP on your ISA external interface?
HTH,
Stefaan
|
|
|
|
|
RE: Getting Error (Urgent) - 10.Aug.2007 2:54:45 AM
|
|
|
rino01
Posts: 66
Joined: 1.Jul.2005
From: Stockholm / Sweden
Status: offline
|
Hello Steefan
I got a hold of a document from a guy that called Micrsoft Support about the SP2 problem and VPN connection (among other things ofcource :-) )
Here is what Microsoft recommended:
After the installation of SP2 we must check the following steps:
· Changed the following registry key:
a) HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters
EnableRSS >>> change it to 0.
EnableTCPA >>> change it to 0.
b) HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters
In the right pane, make sure that the DisableTaskOffload registry entry exists.
If this entry does not exist, follow these steps to add the entry:
On the Edit menu, point to New, and then click DWORD Value, and then type DisableTaskOffload. Double-Click DisableTaskOffload, type 1, and then click OK.
Exit Registry Editor.
· Rebooted the ISA Server.
· Enabled the RPC filter and restarted the ISA Services.
· Tried connecting to VPN.
The B option is the first time i see and i can't really tell if that have anything to do with VPN or not, vould be worth a shoot if he have installed SP2.
< Message edited by rino01 -- 11.Aug.2007 3:38:13 AM >
_____________________________
Best Regards
//Rickard
|
|
|
|
|
RE: Getting Error (Urgent) - 10.Aug.2007 9:32:04 AM
|
|
|
create_share
Posts: 256
Joined: 4.May2005
Status: offline
|
Dear All,
Spouseele is also right but you know i was able to connect to it from the beginining becuase i installed sp-2 when i prepared the server. Now i have disabled these things and after restarting it started working.
Thankx Everybody.
I am going to publish my Exchange Server 2007 and i am sure i will face problems with SP-2. What do u think?
Thankx!
|
|
|
|
|
RE: Getting Error (Urgent) - 11.Aug.2007 3:39:17 AM
|
|
|
rino01
Posts: 66
Joined: 1.Jul.2005
From: Stockholm / Sweden
Status: offline
|
Glad to be of service.
I don't think you will face any big problems with SP2 and Exchange 2007. The biggest problem was the one you have taken care of. I recomend you to read Tom's article about publishing Exchange 2007 with ISA 2007 that will help you on your way.
< Message edited by rino01 -- 11.Aug.2007 3:41:16 AM >
_____________________________
Best Regards
//Rickard
|
|
|
|
 New Messages |
 No New Messages |
 Hot Topic w/ New Messages |
 Hot Topic w/o New Messages |
 Locked w/ New Messages |
 Locked w/o New Messages |
|
 Post New Thread
Reply to Message
Post New Poll
Submit Vote
Delete My Own Post
Delete My Own Thread
Rate Posts |
|
Printable Version
