Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations wOOdy-Soft on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Windows 2003 RRAS VPN Issue - failing to negotiate IP?

Status
Not open for further replies.

ADB100

Technical User
Mar 25, 2003
2,399
GB
I have a Windows 2003 Server running RRAS, configured with L2TP/IPSec & PPTP. This was previously working but I must admit I haven't used it for ages. Now however it has stopped working and it seems to be failing on the IPCP negotiation. Authentication is working but as soon as a client connects the server drops the connection complaining that no protocols can be negotiated:

Event ID: 20050
The user DOMAIN\user connected to port VPN7-3 has been disconnected because no network protocols were successfully negotiated.

I have enabled logging and in the RASIPCP.LOG file is this:

Code:
[3028] 12-14 13:58:35:703: IPCP: VJ disabled
[3028] 12-14 13:58:35:703: IPCP:a=00000000,f=1
[3028] 12-14 13:58:35:703: IPCP: IpcpMakeConfigRequest
[3028] 12-14 13:58:35:703: IPCP: ConfigRequest...
[3028] 13:58:35:703: 01 03 00 22 03 06 00 00 00 00 81 06 00 00 00 00 |..."............|
[3028] 13:58:35:703: 82 06 00 00 00 00 83 06 00 00 00 00 84 06 00 00 |................|
[3028] 13:58:35:703: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
[3028] 12-14 13:58:35:703: IPCP: IpcpBegin
[3028] 12-14 13:58:35:703: IPCP: Hard IP=0
[3028] 12-14 13:58:35:703: IPCP: VJ disabled for VPN
[3028] 12-14 13:58:35:703: IPCP: Compress capabilities: s=$0,0,0 r=$0,15,1
[3028] 12-14 13:58:35:703: IPCP: Server address lookup...
[3028] 12-14 13:58:35:703: IPCP: RasSrvrQueryServerAddresses...
[3028] 12-14 13:58:35:703: IPCP: RasSrvrQueryServerAddresses done(31)
[3028] 12-14 13:58:35:719: IPCP: IpcpMakeConfigRequest
[3028] 12-14 13:58:35:719: IPCP: Deferred IpcpBegin error=31
[3028] 12-14 13:58:35:719: IPCP: IpcpProjectionNotification
[3028] 12-14 13:58:35:719: IPCP: IpcpThisLayerFinished...
[3028] 12-14 13:58:35:719: IPCP: IpcpThisLayerFinished done(0)
[3028] 12-14 13:58:35:719: IPCP: IpcpProjectionNotification
[3028] 12-14 13:58:35:750: IPCP: IpcpPreDisconnectCleanup
[3028] 12-14 13:58:35:750: IPCP: IpcpThisLayerFinished...
[3028] 12-14 13:58:35:750: IPCP: IpcpThisLayerFinished done(0)
[3028] 12-14 13:58:35:750: IPCP: IpcpEnd...
[3028] 12-14 13:58:35:750: IPCP: IpcpThisLayerFinished...
[3028] 12-14 13:58:35:750: IPCP: IpcpThisLayerFinished done(0)
[3028] 12-14 13:58:35:750: IPCP: IpcpEnd done(0)
[3028] 12-14 13:58:35:875: IPCP: IpcpEnd...
[3028] 12-14 13:58:35:875: IPCP: IpcpThisLayerFinished...
[3028] 12-14 13:58:35:875: IPCP: IpcpThisLayerFinished done(0)
[3028] 12-14 13:58:35:875: IPCP: IpcpEnd done(0)

I think the 'RasSrvrQueryServerAddresses done(31)' and 'Deferred IpcpBegin error=31' are the issues but I don't know how to resolve this.

I know the clients are OK as I have connected to other VPN devices to test.

Any ideas?

Andy
 
Just to add... The server is configured with a Static IP Pool but I have also attempted to use DHCP. The resulting error is the same with both. The server has multiple NIC's, only two are actually enabled, the others have all bindings removed and are disabled. The 2 NICs that are in use are an Internet Facing one (with a default-gateway) and an Internal one with no default-gateway and a couple of static routes.

Andy
 
I think I have found something that is relevent but still don't know how to fix it...

On the server under IP Routing, General, the 'Internal' adapter is listed but it is showing the IP Address as 'not available' and the Operational Status is 'Non-operational'. I have installed RRAS on another server to test and it's Internal adapter shows it as Connected with an IP address from the Static Pool.

I assume therefore this is where my problem lies. I have tried removing RRAS and re-installing it but the problem remains.

Anyone?

Andy
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top