RE: VPN

Hello,

Thank you for posting.

>From your post, my understanding of this issue is: When you try to connect
to the VPN server, you get an error message: "Error 778, it was not
possible to verify the identity of the server". If this is not correct,
please feel free to let me know.

Based on my research, this error message may occur only in the environment
in which the RADIUS Authentication is used. To use the RADIUS
Authentication, the Internet Authentication Service (IAS) need to be
installed and configured first. If the IAS is not installed or there is
something wrong with it, the Error 778 may occur.

I suggest you first verify the Routing and Remote Access Service (RRAS)
configuration to verify which authentication method is used. If there is
no IAS server on the network, please choose the Windows Authentication. To
do this, please refer to the following steps:

1. On the VPN server, click Start, click Run, type rrasmgmt.msc, and then
click OK.
2. Right click on the server name and then click Properties.
3. Click on Security tab, under Authentication Provider, click to select
Windows Authentication, under Accounting Provider, click to select Windows
Accounting.
4. Click Authentication Methods button, make sure that only the (MS-CHAP
V2) and (MS-CHAP) are selected.

If the Windows Authentication is used and the issue persists, please refer
to the following steps to re-configure VPN:

1. Open Server Management, click Internet and Email.
2. Click Configure Remote Access and complete the Remove Access Wizard.

If the issue still exists, please help me to collect some information so
that I can perform further research on this issue:

1. Please let me know some detailed information about how you setup the VPN
connection and your network environment.
2. Please compress and send the whole "C:\Program Files\Microsoft Windows
Small business Server\Support" folder to me at v-stwang@xxxxxxxxxxxxxx
3. Run "Netsh ras set tracing * enable" (without quotation marks) command
on SBS Server, repro the issue, and then compress and send the
"C:\Windows\Tracing" folder to me.

For more information about the IAS and RADIUS Authentication, please refer
to the following links:

Internet Authentication Service Technology Center
<http://www.microsoft.com/windowsserver2003/technologies/ias/default.mspx>

Windows Server 2003 Internet Authentication Service (IAS) Operations Guide
<http://www.microsoft.com/downloads/details.aspx?FamilyID=27c432bf-5ed0-4763
-8909-36e7c310ae3c&displaylang=en>

Internet Authentication Service
<http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/Serv
erHelp/d98eb914-258c-4f0b-ad04-dc4db9e4ee63.mspx>

For more information about VPN for Windows Server 2003, please refer to the
following links:

Virtual Private Networks Technology Center
<http://www.microsoft.com/windowsserver2003/technologies/networking/vpn/defa
ult.mspx>

VPN Product Documentation
<http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/Serv
erHelp/a08da8ea-a616-4422-bbd7-9cb8de066b29.mspx>

Use Virtual Private Networks for Secure Internet Data Transfer for Windows
XP
<http://www.microsoft.com/windowsxp/using/mobility/expert/vpns.mspx>

Hope the above information helps. If anything is unclear or you have any
concerns, please feel free to let me know. Thanks for your time and I look
forward to hearing from you.

Have a nice weekend!

Steven Wang (MSFT)
Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security
=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
>Thread-Topic: VPN
>thread-index: AcW0PF3dxOao15XmR9yqyiWwB5wp1A==
>X-WBNR-Posting-Host: 202.83.44.234
>From: =?Utf-8?B?c3VqaXRo?= <sujith@xxxxxxxxxxxxx>
>Subject: VPN
>Date: Wed, 7 Sep 2005 23:13:01 -0700
>Lines: 6
>Message-ID: <137434C2-F9FE-46AC-B57E-CE6F513E638A@xxxxxxxxxxxxx>
>MIME-Version: 1.0
>Content-Type: text/plain;
> charset="Utf-8"
>Content-Transfer-Encoding: 7bit
>X-Newsreader: Microsoft CDO for Windows 2000
>Content-Class: urn:content-classes:message
>Importance: normal
>Priority: normal
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>Newsgroups: microsoft.public.windows.server.sbs
>NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
>Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGXA03.phx.gbl
>Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.windows.server.sbs:203130
>X-Tomcat-NG: microsoft.public.windows.server.sbs
>
>I looked vpn client properties. in its dial in properties i allowed dial
in.
>but now also when i dial after comin verifying user name and password. the
>following error come
>Error 778, it was not possible to verify the idendity of the server.
>i am a begginer and try to study ,myself active directory thats y i dodnt
>know whether i miss some basics to configure vpn. please help me.
>

.