Welcome to ISAserver.org

VPN L2TP error 678 (randomly)

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> VPN >> VPN L2TP error 678 (randomly)

Page: [1]

Message

<< Older Topic Newer Topic >>

VPN L2TP error 678 (randomly) - 28.Sep.2006 2:19:59 PM

victorpr

Posts: 3
Joined: 28.Sep.2006
Status: offline

When we make VPN connection that uses L2TP/IPSec, we may receive the following error message after we try to connect to the VPN server: “Error 678 - There was no answer”
This problem may occur intermittently (randomly). For example, the problem may have the following pattern:
1.         The First attempt to connect to the VPN server is successful.
2.         Second attempt to connect to the VPN server is not successful, and we receive the "Error 678" error message.
3.         The third attempt to connect to the VPN server is not successful, and you receive the "Error 678" error message.
4.         In some minutes the fourth attempt to connect to the VPN server is successful
and so on…
            The VPN connection that uses PPTP works great.

Configuration:

VPN Server:
- Windows 2003 R2 Standard Edition
- ISA 2004 Standard Edition with Service Pack 2
- All updates are installed

Clients:
- Windows 2000 Professional SP4, Windows XP SP1, Windows XP SP2.
- All updates are installed
- All personal firewalls are off
- http://support.microsoft.com/kb/818043 was applied with no results

The VPN Server has a machine certificate in its machine cert store.
The client has a machine certificate in its machine cert store.
Both the client and the ISA firewall have the CA certificate in their machine store's Trusted Root Certification Authorities cert store.
The user has dial-in permission.
All protocol rules on ISA 2004 created.

Post #: 1

Featured Links*

RE: VPN L2TP error 678 (randomly) - 28.Sep.2006 11:03:48 PM

buttheadi

Posts: 7
Joined: 3.Mar.2005
Status: offline

sounds very simmilar with the problem in a previuos topic...http://forums.isaserver.org/Multiple_Remote_Users_trying_to_VPN_from_Same_Location/m_2002022868/tm.htm
no solution so far ...:(

< Message edited by buttheadi -- 28.Sep.2006 11:06:51 PM >

(in reply to victorpr)

Post #: 2

RE: VPN L2TP error 678 (randomly) - 11.Oct.2006 4:50:47 AM

victorpr

Posts: 3
Joined: 28.Sep.2006
Status: offline

In my case the problem has been solved by installation of patch KB912213

(in reply to buttheadi)

Post #: 3

RE: VPN L2TP error 678 (randomly) - 14.Oct.2006 1:40:45 PM

buttheadi

Posts: 7
Joined: 3.Mar.2005
Status: offline

thx for tip, victorpr, I'll try that KB article although it makes reference to a scenario with both the client and the servers behind NAT...
I've also experienced a restricted number of L2TP connections from NAT-ed vpn clients behind one public IP to a non NAT-ed Win 2003 VPN server...

(in reply to victorpr)

Post #: 4

RE: VPN L2TP error 678 (randomly) - 27.Nov.2006 7:07:55 PM

GeirJohansen

Posts: 3
Joined: 27.Nov.2006
From: Norway
Status: offline

Also, check if this is not an issue with MTU size.
Had some similar VPN problems that got resolved .
See ClintD's post: http://forums.isaserver.org/postnumber.aspx?id=240079316

This also helped solving some issues of heavy fragmenting on signed SOAP traffic that resultet in packet loss. Could be worth a try.

_____________________________

Geir Johansen
MCSA, MCSE, MCT
Itum Midt-Norge AS

(in reply to buttheadi)

Post #: 5

RE: VPN L2TP error 678 (randomly) - 30.Nov.2006 3:18:03 AM