VPN errors After SBS2003 SP1 install.

We have GRE passing through to the server, but clients are having
trouble connecting to a fresh install of sbs 2003 sp1 with the connect
to small business server program. They click connect, it fails to connect 3
or 4 times.
Then, sometimes it will connect other times it takes 3 or 4 hours of
reconnecting before it authenticates and allows that VPN connection to
authenticate.


Anyone able to help?

At these times we get these errors.

Event Type: Warning
Event Source: Rasman
Event Category: None
Event ID: 20209
Date: 10/08/2005
Time: 11:52:36 a.m.
User: N/A
Computer: SECURE
Description:
A connection between the VPN server and the VPN client 222.152.16.132 has
been established, but the VPN connection cannot be completed. The most
common cause for this is that a firewall or router between the VPN server
and the VPN client is not configured to allow Generic Routing Encapsulation
(GRE) packets (protocol 47). Verify that the firewalls and routers between
your VPN server and the Internet allow GRE packets. Make sure the firewalls
and routers on the user's network are also configured to allow GRE packets.
If the problem persists, have the user contact the Internet service provider
(ISP) to determine whether the ISP might be blocking GRE packets.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Warning
Event Source: RemoteAccess
Event Category: None
Event ID: 20049
Date: 10/08/2005
Time: 11:37:35 a.m.
User: N/A
Computer: SECURE
Description:
The user connected to port VPN3-3 has been disconnected because the
authentication process did not complete within the required amount of time.

Event Type: Warning
Event Source: Microsoft Firewall
Event Category: Packet filter
Event ID: 15108
Date: 10/08/2005
Time: 12:00:17 p.m.
User: N/A
Computer: SECURE
Description:
ISA Server detected a spoof attack from Internet Protocol (IP) address
192.168.100.1. A spoof attack occurs when an IP address that is not
reachable via the interface on which the packet was received. If logging for
dropped packets is set, you can view details in the packet filter log.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.



.

Relevant Pages

  • Re: How to establish connections to the servers inside a DMZ?
    ... Each server is assigned one of those IPs. ... >> (inside the DMZ) is accessed. ... >Directing packets to the dmz is accomplished with route table entries. ... >packets) and use connection tracking and ESTABLIHED, ...
    (comp.os.linux.networking)
  • Re: Expectation from VPN (sbs2003premSp1)
    ... A connection between the VPN server and the VPN client 222.152.16.132 has ... your VPN server and the Internet allow GRE packets. ...
    (microsoft.public.windows.server.sbs)
  • Re: W2K VPN - Problems using a single server
    ... The encapsulation used is a modified GRE header. ... transferred and the connection closes. ... >> use the VPN server option in the wizard. ... Check that the router is forwarding tcp port 1723 ...
    (microsoft.public.win2000.ras_routing)
  • Re: [Full-Disclosure] idea (quite a bit off-topic, but....)
    ... it is functionally equivilent to just opening a single connection. ... with the symmetric key you got from the server, and send it UDP to a fixed ... After a random number of packets, reconnect with ssl, assert the unique id ...
    (Full-Disclosure)
  • Re: URGENT PLEASE RRAS PROBLEM
    ... it probably is a GRE problem. ... connection is encrypted and then encapsulated. ... > I'm seting up a Windows2003 Sever to allow vpn connections. ... > they can conect to my server... ...
    (microsoft.public.windows.server.networking)