Welcome to ISAserver.org

VPN User cannot connect.

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> VPN >> VPN User cannot connect.

Page: [1]

Message

<< Older Topic Newer Topic >>

VPN User cannot connect. - 11.Feb.2005 2:13:00 PM

UnifiedIT

Posts: 31
Joined: 20.Oct.2004
From: Grand Rapids, MI.
Status: offline

Here is my problem: I have vpn users that can connect to VPN but cannot acces anything on the network. This problem happens to some users and not others. An ISA server reboot always clears up the issue.

ISA VPN Rule:
Allow ALL out bound traffic for Quarantined VPN clients and VPN clients to Internal for VPN Users and VPN Admins.

VPN Users and Admins are security groups in Active Directory.

It happened to my account this week. I am able to successfully connect through VPN (I get a DHCP address and VPN connected status). But if I try to ping any address onm the network I get request timed out. I reboot the server and everything works fine. Could this have anything to do with the concurrent connections? Mine is set to the default of 160. If this is exceeded does it lock the account out until a reboot? Is there any way to see if an account is locked out for some reason?
Thank you,
Mark

Post #: 1

Featured Links*

RE: VPN User cannot connect. - 11.Feb.2005 4:26:00 PM

tshinder

Posts: 47663
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Mark,

Do you see anything in the Alerts tab in the ISA firewall console, or any information in the Event Viewer?

Thanks!
Tom

(in reply to UnifiedIT)

Post #: 2

RE: VPN User cannot connect. - 11.Feb.2005 4:40:00 PM

UnifiedIT

Posts: 31
Joined: 20.Oct.2004
From: Grand Rapids, MI.
Status: offline

I receive this error.
The VPN connection attempt by user DOMAIN\username from VPN client IP address 209.176.x.x could not be established. The failure is due to error: 0xc0040021. I get this error under VPN connection failure but I am unable to find any info anywhere about this error that has a definate fix.

This error is reoccurring over and over so I do not think that it is related to this issue.

Logon Failure:
Reason: An error occurred during logon
User Name:
Domain:
Logon Type: 3
Logon Process: Authz
Authentication Package: Kerberos
Workstation Name: ISAFW01
Status code: 0xC000040A
Substatus code: 0x0
Caller User Name: NETWORK SERVICE

Thanks,
Mark

[ February 11, 2005, 05:13 PM: Message edited by: UnifiedIT ]

(in reply to UnifiedIT)

Post #: 3

RE: VPN User cannot connect. - 16.Feb.2005 10:47:00 PM

UnifiedIT

Posts: 31
Joined: 20.Oct.2004
From: Grand Rapids, MI.
Status: offline

Does anyone have any thoughts on this. I see that it is a common error on message boards but no one has a fix.

The failure is due to error: 0xc0040021

I don't like rebooting the server every time this happens. If I knew what to reset manually that would be easier than rebooting every night.

[ February 16, 2005, 10:55 PM: Message edited by: UnifiedIT ]

(in reply to UnifiedIT)

Post #: 4