Re: Help VPN SBS2k3 error 871 & 800

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: Henry Craven (IUnknown_at_Dot.Nyet)
Date: 10/24/04


Date: Sun, 24 Oct 2004 10:51:37 +1000

Using a Firewall/Router ?

Error Message: VPN Connection Error 800: Unable to Establish Connection
http://support.microsoft.com/?id=319108

-- 
Henry Craven {SBS-MVP}
    Melbourne Australia
"Simon" <no_spam@evelouise.com> wrote in message
news:417a397e$0$38003$ed2e19e4@ptn-nntp-reader04.plus.net...
> Hi All
>
> I am at my wits end........
>
> I have SBS2k3 running ISA2k SP2
>
> we have 3 XP pro SP2 users wanting VPN & 1 Windows2k SP4 user.
>
> I have run RCW & ICW on the server & isued out the VPN connection
setup onto
> the laptops.
>
> All go's well in the office it connects fine over the LAN.
>
> When thay go home the windows 2k gives error 871 & the XP's give
error800.
>
> In connection manager on the XP mic the CSBS states WAN Miniport
(PPTP)
> ***.***.*.*
>
> & on reading the notes on MS support for SBS2k3
>
>
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/networking/vpndeplr.mspx
>
> PPTP can be used with a variety of Microsoft clients including Windows
> Server 2003, Windows XP, Windows 2000, Windows NT version 4.0, Windows
> Millennium Edition, and Windows 98. PPTP does not require a
certificate
> infrastructure to issue computer certificates
>
> I have even tryed to change the regedit
>
> To change the IPSec NAT-T behavior for a computer that is running
Windows XP
> SP2, you must create and set the
AssumeUDPEncapsulationContextOnSendRule
> registry value.
>
> Note Before you configure this registry value, we recommend that you
contact
> your network administrator or read your corporate security policy.
>
> To create and configure the AssumeUDPEncapsulationContextOnSendRule
registry
> value, follow these steps: 1. Click Start, click Run, type regedit,
and then
> click OK.
>       2. Locate and then click the following registry subkey:
>       HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\IPSec
>       3. On the Edit menu, point to New, and then click DWORD Value.
>       4. In the New Value #1 box, type
> AssumeUDPEncapsulationContextOnSendRule, and then press ENTER.
>
>       Important This value name is case-sensitive.
>       5. Right-click AssumeUDPEncapsulationContextOnSendRule, and then
click
> Modify.
>       6. In the Value data box, type one of the following values: . 0
> (default)
>             A value of 0 (zero) configures Windows so that it cannot
> establish security associations with servers that are located behind
network
> address translators.
>             . 1
>             A value of 1 configures Windows so that it can establish
> security associations with servers that are located behind network
address
> translators.
>             . 2
>             A value of 2 configures Windows so that it can establish
> security associations when both the server and the Windows XP
SP2-based
> client computer are behind network address translators.
>
>             Note This configuration exists in the original release
version
> of Windows XP and in Windows XP Service Pack 1 (SP1).
>
>       7.
>       8.
>
>
> And still i get the same error 800   ??????
>
> I have looked to see if the windows 2k laptop and looking at the log
file
> this is what i see
>
> "Business Server Tunnel DeviceName = WAN Miniport (L2TP) TunnelAddress
=
> ***.***.**.*"
>
> What am I doing wrong please...
>
> Simon
>
>


Relevant Pages

  • RE: Create VPN connection to SBS
    ... I agree with Javier that you must configure both the SBS Server and the Windows XP remote client. ... After you established the VPN connection, the default gateway will be change to the VPN connection's gateway. ... modify the predefined settings within Network Connections at the client. ...
    (microsoft.public.windows.server.sbs)
  • Help VPN SBS2k3 error 871 & 800
    ... I have run RCW & ICW on the server & isued out the VPN connection setup onto ... PPTP can be used with a variety of Microsoft clients including Windows ... your network administrator or read your corporate security policy. ... establish security associations with servers that are located behind network ...
    (microsoft.public.backoffice.smallbiz2000)
  • Cannot Create VPN Connection
    ... I have a laptop that I upgraded from Windows Xp Home to Windows XP ... I now want to create a VPN connection to another network using my DSL as ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: PID 1212 slowly maxing out?
    ... Windows 2003 servers, but could it affect Windows XP as well? ... I'm on a home network running on wireless. ... Logical Disk Manager service ...
    (microsoft.public.windowsxp.help_and_support)
  • RE: Printing from Win9x clients stops
    ... Open Server Management. ... then right-click the name of the computer running Windows Small Business ... >From the client computer: ... The Select Network Component Type ...
    (microsoft.public.windows.server.sbs)