RE: L2TP VPN connection between XP Pro and Win 2003 RRAS

anonymous_at_discussions.microsoft.com
Date: 04/28/04 

Date: Wed, 28 Apr 2004 12:46:39 -0700

I had added the same preshared keys both on the client
and RRAS server and am getting the error I described:
mismatch in IKE negotiation protocol.
Server expects Kerberous and Client send preshared key.

>-----Original Message-----
>Hi,
>
>If I understand correctly, when you setup the client in
XP for L2TP, you
>changed the IPSec settings under security and added a
preshared key. If
>this is correct, then I believe you need to add this key
on the server as
>well.
>
>If you have not done this, you can open up the
properties of the server in
>RRAS and select the security tab. At the bottom, there
is a check box and
>a space to place the preshared key.
>
>
>
>
>Thank you,
>Matthew Fresoli
>Microsoft Network Support
>--
>
>This posting is provided "AS IS" with no warranties, and
confers no rights.
>Use of included script samples are subject to the terms
specified at
>http://www.microsoft.com/info/cpyright.htm
>
>Note: For the benefit of the community-at-large, all
responses to this
>message are best directed to the newsgroup/thread from
which they
>originated.
>
>
>.
>

Relevant Pages

  • Re: l2tp/ipsec
    ... However you have to create the same preshared key on both the client and server ... then I don't think it needs the nat-t upgrade but you should review the KB ...
    (microsoft.public.win2000.security)
  • Re: RAS IPSEC/L2TP and Preshared Key
    ... L2TP with preshared key ... > Had a little assistance with the Certificates setting this up thanks ... also trying to set up RAS standalone server to use a preshared key. ...
    (microsoft.public.win2000.ras_routing)
  • Re: L2TP/IPSec from XP client to Windows 2003 Server
    ... You assign the preshared key using the Routing and Remote Access Management ... for allow custom ipsec policy and enter preshared key in the box below. ... I unassigned the security policy on the server and still get the ... > in the Security Policy on the server side, so you have to assign one, even ...
    (microsoft.public.security)
  • Re: RRAS and Preshared Key
    ... If I had lets say my server assigned with a public IP address and my client had a Nat address would this situation work? ... > preshared key on the client and server was by setting up a IPSEC policy. ...
    (microsoft.public.win2000.networking)
  • Re: Win2K vpn client using shared secret key
    ... I was hoping that I could use that as a starting point for getting a client ... For some reason the OS X server can't do PPTP properly (I was ... L2TP/IPSec with a preshared key? ... > on each end of the router connection. ...
    (microsoft.public.win2000.networking)