RRAS Authentication issue error 619

[bradhiggins]

Hey all,

I'm having a bit of a problem with my RAS server. I have windows 2000 Advanced server with routinga nd remote access enabled to allow for dial in access via the one modem connected to this server. It used to work fine but has just recently stopped playing the game.

When I try to dial in using an XP client machine I keep getting an error "619 port has been disconnected" message after it begins the verifying username/password process.

I am running a win2k Active Directory environment where the RAS server is located in the RAS and IAS security group as well as run the netsh ras add registeredserver command.

I have uninstalled reinstalled the modem with latest drivers but still the same problem.

What I can hear is that the dial up (Client) connection appears to get disconnected while the modem connected to the RAS server is still in some form of training/authentication (there is still noise coming from it) process.

Is this a problem with XP clients trying to dial in? I have tried most other fixes but still no joy.

Any help would be greatfully appreciated.

Cheers

Brad

 

[vbrocks]

Sounds like the authentication is shuuting you down...
Check your ias and Rap security policies ....

 

[bradhiggins]

My RAP policy is very basic, it just allows people to dial in in a specific time frame and if they are a member of a particular security group.

I have the user properties in Active Directory saying control dial in via Remote access policy, but to test I specified one user direct dial in access, but I still got the same error.

The frustrating thing is that this has worked fine in the past and without any config changes only now it starts playing funny buggers.

I'm getting close to the end of my tether with it.

Cheers

Brad

 

[vbrocks]

Try to log in locally to the machine (ras server) using the same login name and password and tell me what happens....

 

[bradhiggins]

I am able to log in locally onto the RAS server using the above mentioned username password. But by locally I hope you were still meaning to the local domain as the RAS server is member of 2000 Domain. But if you wanted me to use the domain account I'm trying to log on with to log onto "this computer" then no it doesn't work.

I created a local user ac ount on the RAS server for the user I'm trying to connect with but it will logon at the server but not via dial up connection.

I am using windows authentication not RAdius so I don't have an IAS server configured.

I am also running an ISA server on the same machine but I have had no problems with it at all.

I have also tried a new modem but same problem. It makes a connection starts verifying username and password then eror message of port diconnected, whilst RAS modem is still makin noise.

It just stopped working for no reason. Could a windows update of sorts have killed it in some way.

Cheers

Brad

 

[vbrocks]

Perhaps you can start network monitor at the server, and then try to login remotely. Then after it fails, stop the capture, and then look at the captured packets. It could give you a clue as to what is going on....
Another place to check is user rights assignments ...
log on locally
acess this computer from the network

 

[bradhiggins]

I have a log on locally user rights assignment specified in the domain security policy.

I will give the network monitor option a try to see where/when it is being disconnected.

Thanks for your time

Cheers

Brad

 

[vbrocks]

If the machine is a dc you have to check the domain controller policy....

 

[bradhiggins]

The machine is only a member server, I have two seperate Domain Controllers.

I have also added it to the Ras SErvers local security policy.

We'll see how it goes.