Re: VPN Error 733, Event Log Error 20050 with SBS 2003 - revisited

Hello Nick,

Thank you for your update.

Based on my deep research on your instance, I suggest that we can try the
follow steps:

First, we need to ensure the RRAS is running in a clean environment, make
sure there is no 3rd-party application affects RRAS. So, I suggest you that
disable or uninstall any antivirus software on the RRAS Server.

Second, please try to establish a VPN connection to the IP address of the
SBS Server from the LAN client directly by following this KB:

How to configure a VPN connection to your corporate network in Windows XP
Professional
http://support.microsoft.com/?id=305550

Will the VPN work internally?

If it works, that means there is no problem in RRAS server. So we'd better
check if there are some firewall between remote VPN client and RRAS server.
If it not works:

Third, I suggest you use netsh int ip reset command to reset the TCP/IP
stack follow this KB:

Warning: The netsh int ip reset command will reset all IP information,
default gateway information, and DNS server information. Before you restart
the computer after you run this command, you must configure your TCP/IP
settings. Otherwise, you may not be able to connect to the computer
remotely.

Note: I suggest you to backup the server first in order to avoid server
crash.

How to reset "Internet Protocol (TCP/IP)" in Windows Server 2003
http://support.microsoft.com/kb/317518/en-us

After resetting the TCP/IP stack, we need to restart SBS server and rerun
the CEICW Wizard and the remote access wizard.

If it still doesn't work after steps above, we may need to repair the whole
RRAS component and last. I'll give you the tool to do this step next time.

Hope these steps will give you some help.

Thanks and have a nice day!

Best regards,

Terence Liu(MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| From: "Nick Marks" <youngerpants@xxxxxxxxx>
| Newsgroups: microsoft.public.windows.server.sbs
| Subject: Re: VPN Error 733, Event Log Error 20050 with SBS 2003 -
revisited
| Date: 14 Nov 2006 04:48:12 -0800
| Organization: http://groups.google.com
| Lines: 207
| Message-ID: <1163508492.718432.26540@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
| References: <1163445444.478986.221970@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
| <oo8Yex9BHHA.4020@xxxxxxxxxxxxxxxxxxxxx>
| NNTP-Posting-Host: 82.69.90.169
| Mime-Version: 1.0
| Content-Type: text/plain; charset="us-ascii"
| X-Trace: posting.google.com 1163508498 29446 127.0.0.1 (14 Nov 2006
12:48:18 GMT)
| X-Complaints-To: groups-abuse@xxxxxxxxxx
| NNTP-Posting-Date: Tue, 14 Nov 2006 12:48:18 +0000 (UTC)
| In-Reply-To: <oo8Yex9BHHA.4020@xxxxxxxxxxxxxxxxxxxxx>
| User-Agent: G2/1.0
| X-HTTP-UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB;
rv:1.8.1) Gecko/20061010 Firefox/2.0,gzip(gfe),gzip(gfe)
| Complaints-To: groups-abuse@xxxxxxxxxx
| Injection-Info: i42g2000cwa.googlegroups.com; posting-host=82.69.90.169;
| posting-account=Jes22Q0AAADCZV54HrfD8r8jCYpHsmSi
| Path:
TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTFEED
S02.phx.gbl!news-out.cwix.com!newsfeed.cwix.com!newscon06.news.prodigy.net!p
rodigy.net!border1.nntp.dca.giganews.com!nntp.giganews.com!postnews.google.c
om!i42g2000cwa.googlegroups.com!not-for-mail
| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:312510
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| Hi Terence,
|
| Thank you for getting back to me; a few more avenues to try...
|
| I have tried disabling RRAS and re-running through the internet &
| remote access wizards as per your instructuions, but this didn't
| resolve the issue.
|
| However, the RRAS servers network card is not configured as a DHCP
| client; it has a static IP address. Likewise, the VPN clients are set
| up to get their addresses from a pool of ip addresses (outside of the
| DHCP servers range). Likewise, this is the only DHCP server on the
| network.
|
| To confirm
|
| Server IP address is 192.168.10.10
| Router IP address is 192.168.10.1
| VPN Pool addresses are 192.168.10.40-49
| DHCP Pool is 192.168.10.50-254
|
| ISA server is not installed on this server however, it is running SBS
| 2003 standard edition.
|
| If there is any more information you need, please let me know.
|
| Thanks for your assistance
|
| Nick
|
| Terence Liu [MSFT] wrote:
| > Hello Nick,
| >
| > Thank you for posting here.
| >
| > First please open Routing and Remote Access console. Right-click the
Server
| > Name and choose 'Disable Routing and Remote Access' option. This option
| > will remove all current RRAS configurations and stop the service.
| >
| > Second, please rerun the CEICW via follow page:
| >
| > 825763 How to configure Internet access in Windows Small Business Server
| > 2003
| > http://support.microsoft.com/?id=825763
| >
| > Third, open Server Management console and navigate to 'Internet and
E-mail'
| > snap-in. Click 'Configure Remote Access' to enable the VPN service. Will
| > the problem be resolved?
| >
| > If the issue persists, I'd like to give you some other steps to try:
| >
| > The problem might occur if all the following conditions are true:
| >
| > 1. The RRAS Server's network card is configured as a DHCP client.
| >
| > 2. The RRAS Service is configured to obtain addresses from DHCP for VPN
and
| > dial up clients.
| >
| > 3. There is a reservation on the DHCP Server running on a third party
| > device with a reservation for the RRAS Server.
| >
| > RESOLUTION:
| > ============
| > Remove the reservation on the third party device for the RRAS Server.
| >
| > If the Routing and Remote Access Server had a static IP address for its
LAN
| > adapter. However, the DHCP scope for the LAN included the server's IP
| > address, and there was no exclusion range configured. The DHCP server
then
| > assigned the RRAS server's LAN IP address to one of the VPN ports.
| > Therefore, the server had duplicate IP addresses for its LAN and PPP
| > adapters, and this caused VPN connections to fail. It also caused other
| > networking services and programs on the server to fail. For example, the
| > server was not able to browse the Web after a VPN failure and did not
| > respond to DNS queries.
| >
| > The following steps resolved the problem:
| >
| > 1. Added an exclusion range in the DHCP scope to exclude the server's
LAN
| > IP address from the addresses assigned to DHCP clients
| >
| > 2. Removed the DHCP address leases for the VPN ports
| >
| > 3. Restarted the Routing and Remote Access service
| >
| > If VPN client has install IPX/SPX protocols, please remove IPX/SPX from
the
| > RAS client, and remote mappings from the client machine.
| >
| > If the issue persists, please kindly help me collect some information
for
| > further investigation:
| >
| > Is ISA installed on this SBS server? Which version ISA is?
| >
| > Hope these steps will give you some help.
| >
| > Thanks and have a nice day!
| >
| > Best regards,
| >
| > Terence Liu(MSFT)
| >
| > Microsoft CSS Online Newsgroup Support
| >
| > Get Secure! - www.microsoft.com/security
| >
| > =====================================================
| > This newsgroup only focuses on SBS technical issues. If you have issues
| > regarding other Microsoft products, you'd better post in the
corresponding
| > newsgroups so that they can be resolved in an efficient and timely
manner.
| > You can locate the newsgroup here:
| > http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
| >
| > When opening a new thread via the web interface, we recommend you check
the
| > "Notify me of replies" box to receive e-mail notifications when there
are
| > any updates in your thread. When responding to posts via your
newsreader,
| > please "Reply to Group" so that others may learn and benefit from your
| > issue.
| >
| > Microsoft engineers can only focus on one issue per thread. Although we
| > provide other information for your reference, we recommend you post
| > different incidents in different threads to keep the thread clean. In
doing
| > so, it will ensure your issues are resolved in a timely manner.
| >
| > For urgent issues, you may want to contact Microsoft CSS directly.
Please
| > check http://support.microsoft.com for regional support phone numbers.
| >
| > Any input or comments in this thread are highly appreciated.
| > =====================================================
| >
| > This posting is provided "AS IS" with no warranties, and confers no
rights.
| >
| > --------------------
| > | From: "Nick Marks" <youngerpants@xxxxxxxxx>
| > | Newsgroups: microsoft.public.windows.server.sbs
| > | Subject: VPN Error 733, Event Log Error 20050 with SBS 2003 -
revisited
| > | Date: 13 Nov 2006 11:17:24 -0800
| > | Organization: http://groups.google.com
| > | Lines: 43
| > | Message-ID: <1163445444.478986.221970@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
| > | NNTP-Posting-Host: 82.69.90.169
| > | Mime-Version: 1.0
| > | Content-Type: text/plain; charset="iso-8859-1"
| > | X-Trace: posting.google.com 1163445450 2719 127.0.0.1 (13 Nov 2006
| > 19:17:30 GMT)
| > | X-Complaints-To: groups-abuse@xxxxxxxxxx
| > | NNTP-Posting-Date: Mon, 13 Nov 2006 19:17:30 +0000 (UTC)
| > | User-Agent: G2/1.0
| > | X-HTTP-UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB;
| > rv:1.8.1) Gecko/20061010 Firefox/2.0,gzip(gfe),gzip(gfe)
| > | Complaints-To: groups-abuse@xxxxxxxxxx
| > | Injection-Info: b28g2000cwb.googlegroups.com;
posting-host=82.69.90.169;
| > | posting-account=Jes22Q0AAADCZV54HrfD8r8jCYpHsmSi
| > | Path:
| >
TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTFEEDS02.phx.gbl!newsfeed00
| >
sul.t-online.de!t-online.de!border2.nntp.dca.giganews.com!border1.nntp.dca.
| >
giganews.com!nntp.giganews.com!postnews.google.com!b28g2000cwb.googlegroups.
| > com!not-for-mail
| > | Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:312316
| > | X-Tomcat-NG: microsoft.public.windows.server.sbs
| > |
| > | Hi,
| > |
| > | Unfortunatly my previous thread has been buried since it was posted...
| > | 24 hours ago, so if I could draw your large and knowledgable brains
| > | over here
| > |
| > |
| >
http://groups.google.co.uk/group/microsoft.public.windows.server.sbs/browse_
| >
thread/thread/fd00d89a03d5d6b2/55baccf863bcf4b8?lnk=gst&q=20050&rnum=2&hl=en
| > #55baccf863bcf4b8
| > |
| > | A brief summary.
| > |
| > | I have a Windows SBS 2003 sat on my network with an internal address
| > | with port 1723 NAT'ed to our external static ip address on the
router.
| > | Likewise GRE is forwarding on the router, a Zyxel Prestige 660R-61C
| > | (although I have previously tied using a Cisco 877).
| > |
| > | I have run through the remote access wizard in order to enable VPN
| > | access however whenever clients try to connect, the connection "seems"
| > | to start working (Verifing Username/ Password, Registering your
| > | computer on the network) then stops with "TCP/ IP CP reported error
| > | 733. The connection to the remote computer could not be completed. You
| > | may need to adjust the protocols on this computer..." This problem
| > | also occurs when directly on the LAN from any number of clients... the
| > | problem is almost certainly with the server
| > |
| > | I have re-run through setting up Routing and Remote Access, and have
| > | assigned a pool of addresses for VPN connections outside of the
servers
| > | DHCP range as per the advice on www.chicagotech.net but this does not
| > | seem to have fixed the problem. Likewise I have enabled all
| > |
| > | In my event log I get Remote Access Error 20050, the user connected to
| > | the porthas been disconnected because no network protocols were
| > | sucessfully negotiated.
| > |
| > | When testing using the PPTPSVR/CLNT tools on the installation CD the
| > | server sucessfully received the test message, but the client didn't
get
| > | any message back.
| > |
| > | The RRAS logs are also available on the old thread.
| > |
| > | Thanks for your help!
| > |
| > | Nick
| > |
| > |
|
|

.

Relevant Pages

  • RE: Remote access recurrent disconnection
    ... My VPN and RWW is already configured as you have described below. ... server and rerun the CEICW for the remote access to work. ... As from then every 3 hours I have to run this wizard for remote access to ...
    (microsoft.public.windows.server.sbs)
  • Re: VPN disconnection
    ... Server 2003 SP2 or the Scalable Networking Pack on a Windows Small Business ... Please Run the Configure Remote Access wizard to configure VPN. ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • Re: VPN Error 733, Event Log Error 20050 with SBS 2003 - revisited
    ... the RRAS servers network card is not configured as a DHCP ... this is the only DHCP server on the ... First please open Routing and Remote Access console. ...
    (microsoft.public.windows.server.sbs)
  • Re: VPN disconnection
    ... After you installed the updates, please also try to disable offloading ... Server 2003 SP2 or the Scalable Networking Pack on a Windows Small ... Please Run the Configure Remote Access wizard to configure VPN. ...
    (microsoft.public.windows.server.sbs)
  • RE: ISA 2004 = RemoteAccess service is Stopped
    ... I understand that after you installed the ISA Server ... client can no longer connect to the SBS Server via VPN. ... The Remote Access Service is one part of the ISA's core services which is ... In addition, to find out if the VPN traffic is blocked by the ISA Server, ...
    (microsoft.public.windows.server.sbs)