Hi,

We are using SBS2000 and we have a client on the network
who cannot create an outbound VPN connection.

I have been blowing my brains out but nothing is working.

I followed the article in:
http://www.tacteam.net/isaserverorg/vpnkitbeta2/outboundnat
-t.htm but this did not work.

The error message is:

Error 789: The L2TP connection attempt failed because the
security layer encountered a processing error during
initial negotiations with the remote computer.

Please help!

skc

Re: Problem by Steve

Steve
Thu Feb 12 08:11:18 CST 2004

skc wrote:

> Hi,
>
> We are using SBS2000 and we have a client on the network
> who cannot create an outbound VPN connection.
>
> I have been blowing my brains out but nothing is working.
>
> I followed the article in:
> http://www.tacteam.net/isaserverorg/vpnkitbeta2/outboundnat
> -t.htm but this did not work.
>
> The error message is:
>
> Error 789: The L2TP connection attempt failed because the
> security layer encountered a processing error during
> initial negotiations with the remote computer.
>
> Please help!
>
> skc

Do you know that the third-party server to which you're trying to
establish the L2TP/IPSec VPN supports NAT-T?

Most don't yet, only supporting their own method of UDP Encapsulation.

--
Steve Foster [SBS MVP]
---------------------------------------
MVPs do not work for Microsoft. Please reply only to the newsgroups.

Re: Problem by skc

skc
Thu Feb 12 09:36:02 CST 2004

It's just a Windows XP box.

This was all working fine until we swapped SBS2000 boxes
and moved everything accross to the new one and took the
old one off the domains. Inbound VPN is fine.

Skc

>-----Original Message-----
>skc wrote:
>
>> Hi,
>>
>> We are using SBS2000 and we have a client on the
network
>> who cannot create an outbound VPN connection.
>>
>> I have been blowing my brains out but nothing is
working.
>>
>> I followed the article in:
>>
http://www.tacteam.net/isaserverorg/vpnkitbeta2/outboundnat
>> -t.htm but this did not work.
>>
>> The error message is:
>>
>> Error 789: The L2TP connection attempt failed because
the
>> security layer encountered a processing error during
>> initial negotiations with the remote computer.
>>
>> Please help!
>>
>> skc
>
>Do you know that the third-party server to which you're
trying to
>establish the L2TP/IPSec VPN supports NAT-T?
>
>Most don't yet, only supporting their own method of UDP
Encapsulation.
>
>--
>Steve Foster [SBS MVP]
>---------------------------------------
>MVPs do not work for Microsoft. Please reply only to the
newsgroups.
>.
>

Re: Problem by skc

skc
Thu Feb 12 09:37:18 CST 2004

in fact you are right - it should be PPTP not L2TP - how
do I change this???

>-----Original Message-----
>skc wrote:
>
>> Hi,
>>
>> We are using SBS2000 and we have a client on the
network
>> who cannot create an outbound VPN connection.
>>
>> I have been blowing my brains out but nothing is
working.
>>
>> I followed the article in:
>>
http://www.tacteam.net/isaserverorg/vpnkitbeta2/outboundnat
>> -t.htm but this did not work.
>>
>> The error message is:
>>
>> Error 789: The L2TP connection attempt failed because
the
>> security layer encountered a processing error during
>> initial negotiations with the remote computer.
>>
>> Please help!
>>
>> skc
>
>Do you know that the third-party server to which you're
trying to
>establish the L2TP/IPSec VPN supports NAT-T?
>
>Most don't yet, only supporting their own method of UDP
Encapsulation.
>
>--
>Steve Foster [SBS MVP]
>---------------------------------------
>MVPs do not work for Microsoft. Please reply only to the
newsgroups.
>.
>

Re: Problem by Steve

Steve
Fri Feb 13 22:12:11 CST 2004

skc wrote:

> in fact you are right - it should be PPTP not L2TP - how
> do I change this???
>

First section of the tacteam article you linked to explains how to
allow PPTP out through ISA.

--
Steve Foster [SBS MVP]
---------------------------------------
MVPs do not work for Microsoft. Please reply only to the newsgroups.