• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

VPN clients stuck at verifying username/password

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA 2006 Firewall] >> VPN >> VPN clients stuck at verifying username/password Page: [1]
Login
Message << Older Topic   Newer Topic >>
VPN clients stuck at verifying username/password - 13.Mar.2009 5:22:56 PM   
moit

 

Posts: 27
Joined: 5.Mar.2008
Status: offline
We have Windows Server 2003 SP2 with ISA 2006 SP1
This issue started happening recently when a client tries to connect to the VPN they are stuck at verifying username and password prompt and then it times out.  In the ISA Server System Log event id

Event Type: Warning
Event Source: Rasman
Event Category: None
Event ID: 20209
Date:  3/13/2009
Time:  4:02:43 PM
User:  N/A
Computer: SRVR
Description:
A connection between the VPN server and the VPN client (IP) has been established, but the VPN connection cannot be completed. The most common cause for this is that a firewall or router between the VPN server and the VPN client is not configured to allow Generic Routing Encapsulation (GRE) packets (protocol 47). Verify that the firewalls and routers between your VPN server and the Internet allow GRE packets. Make sure the firewalls and routers on the user's network are also configured to allow GRE packets. If the problem persists, have the user contact the Internet service provider (ISP) to determine whether the ISP might be blocking GRE packets.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

is logged.

When I restart the RAS Service clients can connect again for a period of  time then again same thing happens. Any ideas?
All help is appreciated. Thanks 

< Message edited by moit -- 13.Mar.2009 5:25:27 PM >
Post #: 1
RE: VPN clients stuck at verifying username/password - 22.Mar.2009 8:16:51 PM   
ONGC

 

Posts: 1
Joined: 22.Mar.2009
Status: offline
Hi There,

I too am having this issue.  If any assistance could be offered it would be much appreciated.

Cheers

Steve

(in reply to moit)
Post #: 2
RE: VPN clients stuck at verifying username/password - 23.Mar.2009 1:25:38 AM   
nanaik

 

Posts: 97
Joined: 11.Dec.2008
Status: offline
most probably you have not specified idle time out or client session time out in RRAS. Eg. When you specief VPN Range for /24 or say / 23 so you have 256 or 512 IP address allocate. If you disable those option whenever a new client connect assign with new IP Address. once it finish it will connect but have not assign new session with valid IP. change the setting as per your requirement and your users.
 
 RRAS---  Open remote access policy--- open ISA Policy ---- Edit profile --- Dial in constraints--- set as per your requiremet.
 
Let me know if you found solution other than the same.

_____________________________

Thanks,
Neel Naik

(in reply to ONGC)
Post #: 3
RE: VPN clients stuck at verifying username/password - 23.Mar.2009 1:29:48 AM   
nanaik

 

Posts: 97
Joined: 11.Dec.2008
Status: offline
When you restart the RRAS Service, it reset everything and start allocating IP from first.



_____________________________

Thanks,
Neel Naik

(in reply to nanaik)
Post #: 4
RE: VPN clients stuck at verifying username/password - 20.Apr.2009 9:59:46 AM   
mrjahnara

 

Posts: 82
Joined: 12.Aug.2008
From: Dubai
Status: offline
Hi,

I am having the same issue and in my case the cisco router is not allowing the GRE protocol. I tried within the local network it works fine, the ISA server is accepting the VPN connection, but from outside connection is establishing but timeout after verifying username and password.

Have any one got the solution for this? please help.




Thanks and Regards

(in reply to nanaik)
Post #: 5
RE: VPN clients stuck at verifying username/password - 20.Apr.2009 11:52:30 AM   
pwindell

 

Posts: 2244
Joined: 12.Apr.2004
From: Taylorville, IL
Status: offline
To anyone this may matter to:

The KB956570 patch screws up VPN.  If you ISA has this patch installed you can either try removing it or try disabling it with the script mentioned in this:

http://support.microsoft.com/kb/956570


_____________________________

Phillip Windell

(in reply to mrjahnara)
Post #: 6

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA 2006 Firewall] >> VPN >> VPN clients stuck at verifying username/password Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts