|
itsallwright -> VPN Authentication Problem (23.Jul.2008 1:50:21 PM)
|
I have 2 NLB ISA 2006 Ent servers in an array running Windows Server 2003 R2 SP2 and joined to the domain. When I try to VPN in, authentication takes a really long time if it works at all (sometimes it times out).
VPN configuration:
- VPN is enabled
- Assigned a domain group with vpn users as members.
- Both PPTP and L2TP are selected for Protocols.
- User Mapping is unchecked.
- External network selected under access networks.
- Address Assignment is set to Static Pool.
- Authentication is set as MS-CHAPv2.
- No RADIUS selected.
In the System log on the ISA server that handled the request, I see several of the following events.
Event Type: Warning
Event Source: RemoteAccess
Event Category: None
Event ID: 20189
Date: 7/23/2008
Time: 12:33:57 PM
User: N/A
Computer: ISAServer
Description:
The user <Domain>\<UserName> connected from x.x.x.x but failed an authentication attempt due to the following reason: Authentication was not successful because an unknown user name or incorrect password was used.
In the Security log of the Domain Controller (Server 2008 x64), I see several of these events.
Log Name: Security
Source: Microsoft-Windows-Security-Auditing
Date: 7/23/2008 12:34:12 PM
Event ID: 4776
Task Category: Credential Validation
Level: Information
Keywords: Audit Failure
User: N/A
Computer: DC.mydomain.com
Description:
The domain controller attempted to validate the credentials for an account.
Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Logon Account: <UserName>
Source Workstation:
Error Code: 0xc000006a
I researched the error code listed above and it means:
0xC000006A - The value provided as the current password is not correct
The previous events are followed by the following single event upon success (if it doesn't time out).
Log Name: Security
Source: Microsoft-Windows-Security-Auditing
Date: 7/23/2008 12:34:12 PM
Event ID: 4776
Task Category: Credential Validation
Level: Information
Keywords: Audit Success
User: N/A
Computer: DC.mydomain.com
Description:
The domain controller attempted to validate the credentials for an account.
Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Logon Account: <UserName>
Source Workstation:
Error Code: 0x0
If I use a local account on the ISA server, it works almost instantly as expected.
Any suggestions to a solution would be greatly appreciated.
Thanks,
Jay
|
|
|
|