Welcome to ISAserver.org

Error 789: The L2TP attempt failed...

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> VPN >> Error 789: The L2TP attempt failed...

Page: [1]

Message

<< Older Topic Newer Topic >>

Error 789: The L2TP attempt failed... - 14.Sep.2004 6:26:00 PM

dsheehan2004

Posts: 4
Joined: 11.Aug.2004
Status: offline

HI,

I am getting an error 789: The L2TP connection attempt failed because the security layer encountered a processing error during initial negotiations with the remote computer.

Certs are installed on the ISA server and the clients, as I am in the initial testing before deployment of this server, and did have L2TP/IPSec VPN working 100% last week.

I thought it might possibly be XP SP2, but I tried this on XP SP1 and Win 2K SP4.

This error pops up immediately when I try to connect. PPTP works just fine.

I have the ports open for Ipsec, Nat-t, L2TP, I reinstalled the certs and CA cert in Trusted root CA's, etc, and also re-installed certs on teh clients.

I have even tried using a pre-shared key for testing today with no luck.

Can anyone point me in the right direction as to where to look for the problem/solution of this issue? This is the only thing holding me up from deployment...

Thanks in advance! "[Confused]"

Post #: 1

Featured Links*

RE: Error 789: The L2TP attempt failed... - 14.Sep.2004 7:30:00 PM

ClintD

Posts: 1848
Joined: 26.Jan.2001
From: Keller, TX
Status: offline

Can you enable Oakley loggin on the XP client and post the contents of the log?

In the registry, go to HKLM\System\CurrentControlSet\Services\PolicyAgent\Oakley and create a REG_DWORD value of EnableLogging and set it to 1. You might have to create the Oakley key (folder).

Once this is done, reboot the client and attempt to connect again. Then look in the c:\windows\debug directory for the oakley.log file and post the contents.

(in reply to dsheehan2004)

Post #: 2

RE: Error 789: The L2TP attempt failed... - 14.Sep.2004 8:19:00 PM

dsheehan2004

Posts: 4
Joined: 11.Aug.2004
Status: offline

Thanks for the oakley log tip... I did find the problem because of it. It seems that the IPSec service keeps crashing on startup, and when I try to start it manually, so I may have other problems with this client.

Also, on the win2k client IPSec was disabled. No clue why either because I did not disable it. Maybe IPSec is disabled by default, but I have never run into this problem when I had the VPN Working fine last week.

Thanks!

(in reply to dsheehan2004)

Post #: 3