Troubleshooting Windows Remote Access connections

	Home \| Site Map \| Cisco How To \| Net How To \| Wireless \| Case Studies \| Forums \| Services \| Donations \| Careers \| About Us \| Contact Us\|
	Why bother deciphering Event logs when GFI EventsManager can do everything for you? Free trial here!

Troubleshooting Windows Remote Access Connections

The remote access server does not accept a PPTP connection

Error 649 - Login failed: username, password, or domain was incorrect

VPN Error 733 - the PPP control protocol for this network protocol is not available on the server.

Event ID 20050, 20189 and 20078

Symptoms:

1. The remote access server does not accept a PPTP connection.

2. Error 649 - Login failed: username, password, or domain was incorrect.

3. The RRAS server has Event ID 20050
Source: Remote Access
Description: The user Domain\User connected to port VPNx has been disconnected because the computer could not be projected onto the network.

4. Examine the IPCP and PPP logs on the computer running RRAS. An example of a log examination could be as follows:

The call to activate a new route is not working properly and displays error 31.

IPCP.LOG: [205] 02:03:30: IPCP: RasActivateRoute done (31)
PPP.LOG: [205] 02:03:30:421: RasIPCPProjectionNotification returned 31.

5. Event ID 20189
The user \username connected from x.x.x.x but failed an authentication attempt due to the following reason: The user tried to connect using an unauthorized dial-in media.

6. Event ID 20078
The account for user \username connected on port VPN3-127 does not have Remote Access privilege. The line has been disconnected.

Cause: You may receive above errors if you configure Dial-in Media incorrectly.

Resolution:
To resolve this, try the following procedure:

Open the Routing and Remote Access snap-in.

Expand the node under your PPTP server's name.

Click the Remote Access Policies folder.

Right-click the default policy named Allow access if dial-in permission is enabled, and then click Properties.

Click Edit Profile in the Properties dialog box.

On the Dial-in Constraints tab, complete one of the following tasks:

•

Clear the Restrict Dial-in Media option.

•

Select Restrict Dial-in Media, and then select Ethernet and VPN from the list of options available.

Click Apply, and then click OK.