RRAS w2k3 r2 - BUG with D.O.D adapter in VPN Site-to-Site!!!!!

Hi all,

i´m facing the following trouble:

Some times my VPN Site-to-Site dont connect and the EventViewer\Application
shows the id:20209 ('...certifie that GRE is allowed...'). When it occurs,
the VPN cannot be stablished!

So, for to stablish again I need 'DISCONECT' / 'DISABLE' the D.O.D adapter
on both site/servers!!!

* It´s to hard to do it every time, in a common situtation like reboot one
server...

######################################
Can Microsoft provide a hotfix for this 'stupid' behavior???
######################################

* My Boot DCs are Windows Server 2003 STD R2 with spk2 and have 2 nic, one
for internal LAN and another to EXTERNAL access (internet). I folow the
article http://support.microsoft.com/kb/272294 for multihomed DC´s

* My VPN Site-to-Site was configured as the article
http://technet.microsoft.com/en-us/l...(printer).aspx

The c:\WINDOWS\tracing\RASMAN.LOG shows:
##############################

Connect request on port: VPN5-1, error code 600

tks,

Renato Jr

"Renato Jr/TX Informatica" wrote:

> Hi all,
>
> i´m facing the following trouble:
>
> Some times my VPN Site-to-Site dont connect and the EventViewer\Application
> shows the id:20209 ('...certifie that GRE is allowed...'). When it occurs,
> the VPN cannot be stablished!
>
> So, for to stablish again I need 'DISCONECT' / 'DISABLE' the D.O.D adapter
> on both site/servers!!!
>
> * It´s to hard to do it every time, in a common situtation like reboot one
> server...
>
> ######################################
> Can Microsoft provide a hotfix for this 'stupid' behavior???
> ######################################
>
> * My Boot DCs are Windows Server 2003 STD R2 with spk2 and have 2 nic, one
> for internal LAN and another to EXTERNAL access (internet). I folow the
> article http://support.microsoft.com/kb/272294 for multihomed DC´s
>
> * My VPN Site-to-Site was configured as the article
> http://technet.microsoft.com/en-us/l...(printer).aspx

Problem solved!!

Since my D.O.D adapter was using MSCHAP v2, the user name must be in the
following format: '(E-Mail Removed)' and the DOMAIN field blank!

Now, D.O.D connect´s fine!!

* Hey Microsoft, please: Document this!!! The log is so hard to
troubleshooting, because no intuitive EventViewers ID are registrated! *
Impossible to clear log files for create a new one without 'trash'... Why not
include on the GUI an information about that???

tks,

Renato Jr

"Renato Jr/TX Informatica" wrote:

> Hi all,
>
> i´m facing the following trouble:
>
> Some times my VPN Site-to-Site dont connect and the EventViewer\Application
> shows the id:20209 ('...certifie that GRE is allowed...'). When it occurs,
> the VPN cannot be stablished!
>
> So, for to stablish again I need 'DISCONECT' / 'DISABLE' the D.O.D adapter
> on both site/servers!!!
>
> * It´s to hard to do it every time, in a common situtation like reboot one
> server...
>
> ######################################
> Can Microsoft provide a hotfix for this 'stupid' behavior???
> ######################################
>
> * My Boot DCs are Windows Server 2003 STD R2 with spk2 and have 2 nic, one
> for internal LAN and another to EXTERNAL access (internet). I folow the
> article http://support.microsoft.com/kb/272294 for multihomed DC´s
>
> * My VPN Site-to-Site was configured as the article
> http://technet.microsoft.com/en-us/l...(printer).aspx

"Renato Jr/TX Informatica" <(E-Mail Removed) >
wrote in message news:C43EC207-1D30-4CAC-A918-(E-Mail Removed)...

> * Hey Microsoft, please: Document this!!!

Microsoft ain't here!

We are not Microsoft!

--
Phillip Windell
www.wandtv.com

The views expressed, are my own and not those of my employer, or Microsoft,
or anyone else associated with me, including my cats.
-----------------------------------------------------