• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

ERROR 619

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA 2006 Firewall] >> VPN >> ERROR 619 Page: [1]
Login
Message << Older Topic   Newer Topic >>
ERROR 619 - 9.Dec.2008 10:52:13 PM   
techy344

 

Posts: 21
Joined: 29.Sep.2008
Status: offline
hi there,

i am running isa 2006 as edge firewall and web proxy. vpn i works great no problems at all..but vpn out thru the isa box is not working at all. when i try to connect to a client thru a pptp tunnel it gets to verifying username and password and then fails saying "Error 619 - a connection to the remote computer culd not be established, so the port used for this connectin was closed". when i go out on a different internet line pptp connection works fine no issue.

i need to get this working as many of our staff vpn out to clients for remote support and changing gateways every time is not effecient. please help..

thanks
rhys
Post #: 1
RE: ERROR 619 - 10.Dec.2008 7:59:36 AM   
paulo.oliveira

 

Posts: 3472
Joined: 3.Jan.2008
From: Amazon, Brazil
Status: offline
Hi,

is your client configured as SecureNAT?

This article can give you a great help to understand the PPTP protocol: http://blogs.isaserver.org/pouseele/2007/06/17/multiple-pptp-vpn-clients-behind-a-nat-device/

Regards,
Paulo Oliveira.

< Message edited by paulo.oliveira -- 10.Dec.2008 8:03:53 AM >

(in reply to techy344)
Post #: 2
RE: ERROR 619 - 10.Dec.2008 8:42:51 PM   
techy344

 

Posts: 21
Joined: 29.Sep.2008
Status: offline
hi paulo

yeah all our computer are configured as securenat and web proxy clients. will reda thru the article. will let you know how i go.

thanks

(in reply to paulo.oliveira)
Post #: 3
RE: ERROR 619 - 10.Dec.2008 10:31:55 PM   
techy344

 

Posts: 21
Joined: 29.Sep.2008
Status: offline
hi paulo,

that blog didnt help at all. we are trying to vpn out to billion soho modems and keep getting error 619. vpn in works fine. vpn out is what we need to fix. please help

thanks

(in reply to paulo.oliveira)
Post #: 4
RE: ERROR 619 - 11.Dec.2008 7:34:35 AM   
paulo.oliveira

 

Posts: 3472
Joined: 3.Jan.2008
From: Amazon, Brazil
Status: offline
Hi,

the meant of that blog post was to help you understand the funcionality of PPTP protocol and use a network sniffer to see if the SOHO modem is handling the packets rigth.

Regards,
Paulo Oliveira.

(in reply to techy344)
Post #: 5
RE: ERROR 619 - 11.Dec.2008 7:37:27 PM   
techy344

 

Posts: 21
Joined: 29.Sep.2008
Status: offline
this is the log out of the network monitor.

TCP:Flags=......S., SrcPort=1061, DstPort=1723, PayloadLen=0, Seq=180323778, Ack=0, Win=65535 (  ) = 65535
TCP:Flags=...A..S., SrcPort=1723, DstPort=1061, PayloadLen=0, Seq=3997367969, Ack=180323779, Win=16384 ( Scale factor not supported ) = 16384
PPTP PPTP:Control Message , Start Control Connection Request
TCP TCP:Flags=...A...., SrcPort=1723, DstPort=1061, PayloadLen=0, Seq=3997367970, Ack=180323935, Win=65379 (scale factor 0x0) = 65379
PPTP PPTP:Control Message , Start Control Connection Reply
PPTP PPTP:Control Message , Outgoing Call Request
PPTP PPTP:Control Message , Outgoing Call Reply
PPTP PPTP:Control Message , Set Link Info
LCP LCP:Configure-Request, ID = 0, Length = 21
TCP TCP:Flags=...A...., SrcPort=1723, DstPort=1061, PayloadLen=0, Seq=3997368158, Ack=180324127, Win=65187 (scale factor 0x0) = 65187
ARP ARP:Request, 192.168.10.2 asks for 192.168.10.242
ARP ARP:Request, 192.168.10.2 asks for 192.168.10.245
UDP UDP:SrcPort = 33218, DstPort = 3052, Length = 496
BROWSER BROWSER:Local Master Announcement, ServerName = SERVER
LCP LCP:Configure-Request, ID = 1, Length = 21
LCP LCP:Configure-Request, ID = 1, Length = 21
LCP LCP:Configure-Ack, ID = 1, Length = 21
PPTP PPTP:Control Message , Echo Request PPTP PPTP:Control Message , Echo Reply
TCP TCP:Flags=...A...., SrcPort=1723, DstPort=1061, PayloadLen=0, Seq=3997368174, Ack=180324147, Win=65167 (scale factor 0x0) = 65167
LCP LCP:Configure-Request, ID = 2, Length = 21
LCP LCP:Configure-Reject, ID = 2, Length = 9
LCP LCP:Configure-Request, ID = 3, Length = 16
LCP LCP:Configure-Request, ID = 2, Length = 21
LCP LCP:Configure-Ack, ID = 2, Length = 21
LCP LCP:Configure-Ack, ID = 3, Length = 16
PPTP PPTP:Control Message , Set Link Info
LCP LCP:Identification, ID = 4, Length = 18
LCP LCP:Identification, ID = 5, Length = 23
CHAP CHAP:Challenge, ID = 4, Length = 21
CHAP CHAP:Response, ID = 4, Length = 60 , Name = 'welcon'
TCP TCP:Flags=...A.R.., SrcPort=1723, DstPort=1061, PayloadLen=0, Seq=3997368174, Ack=180324171, Win=0 (scale factor 0x0) = 0
CHAP CHAP:Success, ID = 4, Length = 46 , Message = 'S=01039ED721CF1A36E28A30888287DAC6CFCA45C7'
IPCP IPCP:Code = Configure-Request, Length = 10
UDP UDP:SrcPort = 1040, DstPort = 1947, Length = 48
IPCP IPCP:Code = Configure-Request, Length = 10
ARP ARP:Request, 192.168.10.2 asks for 192.168.10.242
ARP ARP:Request, 192.168.10.2 asks for 192.168.10.245
UDP UDP:SrcPort = 1037, DstPort = 1947, Length = 48
IPCP IPCP:Code = Configure-Request, Length = 10
UDP UDP:SrcPort = 1037, DstPort = 1947, Length = 48

hope this helps..

(in reply to paulo.oliveira)
Post #: 6
RE: ERROR 619 - 15.Dec.2008 8:11:21 PM   
techy344

 

Posts: 21
Joined: 29.Sep.2008
Status: offline
anyone have any ideas?? would having a billion modem/router in-front of the isa server as our main modem be a problem?

(in reply to techy344)
Post #: 7
RE: ERROR 619 - 22.Dec.2008 11:35:17 PM   
techy344

 

Posts: 21
Joined: 29.Sep.2008
Status: offline
hi there.. still a problem this is..anyone have anything??

(in reply to techy344)
Post #: 8
RE: ERROR 619 - 7.Jan.2009 2:57:34 PM   
adimcev

 

Posts: 380
Joined: 19.Oct.2008
Status: offline
Have you seen this entry from ISA Server Product Team's blog, might be just your case:
http://blogs.technet.com/isablog/archive/2009/01/07/a-pptp-client-might-fail-to-connect-to-a-vpn-server-on-the-internet-through-an-isa-server-2006.aspx

Adrian

_____________________________

Blog: http://www.carbonwind.net/blog

Get Our ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to techy344)
Post #: 9
RE: ERROR 619 - 7.Jan.2009 6:41:44 PM   
techy344

 

Posts: 21
Joined: 29.Sep.2008
Status: offline
hi,

no i had not seen that article yet. but i ahve solved this now anyway by replacing our modem/router with just a modem and it works fine.. thanks all for all help.

(in reply to adimcev)
Post #: 10

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA 2006 Firewall] >> VPN >> ERROR 619 Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts