Home | Site Map | Cisco How ToNet How To | Wireless |Search | Forums | Services | Donations | Careers | About Us | Contact Us|

Error 691 in RRAS after NIC changed

RRAS, VPN, TS/RDP, Routing and remote Access.

Error 691 in RRAS after NIC changed

Postby Louise » Tue Aug 21, 2007 8:29 pm

Hi all in need of help with 2 issues.

Number one:
Our server is running Win 2003 R2 with AD, DHCP, DNS ,TS and RRAS all on one machine [due to company budget]. The server was running a single NIC when I first started work here so I added a second NIC and reconfigured RRAS to use one NIC for External and one for internal. All worked well and VPN client could connect without any issues. The internal NIC failed some months later and was replaced, however since that day no VPN client has been able to connect. The client receives error 691. I've unistalled and reinstall the RRAs servicer but still the same. Routing works without any issues. The client details are unchanged and the same details can logon to the domain from a local machine. It appears to me that for some reason RRAS is now able to authenticate the client requests with domain control although they are on the same machine. Any idea would be greatly appreciated.

Number two:

For some unknown reason when I now run terminal services manger it appears in the task bar but can not been seen on screen but only in one profile. If I log in with another profile the terminal services manger runs without problem.

Thanks :?
Louise
 
Posts: 5
Joined: Tue Aug 21, 2007 8:14 pm
Location: Brisbane

Postby chicagotech » Tue Aug 21, 2007 8:39 pm

The VPN error 691 is logon format or security issue. Have you check these links,

VPN error 691
Posted: Fri Mar 16, 2007 9:52 am Post subject: VPN error 691, Reply with quote. Hello, After a working VPN connection i suddenly get the error ...
www.chicagotech.net/netforums/viewtopic ... 6ff6277482 -

Solved: Vista VPN error 691The error code returned on failure is 691. but when i login I don't specify the domain, I just enter dlozzi and my password. How do I stop the adding of the ...
www.chicagotech.net/netforums/viewtopic ... 170e68890b -

ras error codeError 650
Error 678 Error 682 Error 691 Error 711 Error 720 Error 721 VPN Error 732: The PPP negotiation is not converging Error 733 ...
www.chicagotech.net/raserrors.htm
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
chicagotech
Site Admin
 
Posts: 6673
Joined: Mon Nov 27, 2006 1:24 pm
Location: Chicago USA

Postby Louise » Wed Aug 22, 2007 1:13 am

Ya looked at all those sites and just can't get to the bottom of this.

I've changed the security settings and even tried "Allow remote systems to connect without authentication" but the same error is returned to the client "691"

Anymore ideas?
Louise
 
Posts: 5
Joined: Tue Aug 21, 2007 8:14 pm
Location: Brisbane

Postby chicagotech » Thu Aug 23, 2007 8:58 pm

Any errors in the RRAS Event Viewer/
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
chicagotech
Site Admin
 
Posts: 6673
Joined: Mon Nov 27, 2006 1:24 pm
Location: Chicago USA

Postby Louise » Thu Aug 23, 2007 11:28 pm

Ok I've just tried to connect from a remote site at 14.20pm here are the log file results.

RASAUTH.log

[10304] 14:20:00:265: RasAuthProviderAuthenticateUser called
[10304] 14:20:00:281: Type=44, Length=3, Value=
[10304] 14:20:00:281: 32 38 30 00 00 00 00 00 00 00 00 00 00 00 00 00 |280.............|
[10304] 14:20:00:281: Type=4, Length=4, Value=0xa01015a
[10304] 14:20:00:281: Type=6, Length=4, Value=0x2
[10304] 14:20:00:281: Type=7, Length=4, Value=0x1
[10304] 14:20:00:281: Type=5, Length=4, Value=0x81
[10304] 14:20:00:281: Type=26, Length=10, Value=
[10304] 14:20:00:281: 00 00 01 37 09 06 00 00 01 37 00 00 00 00 00 00 |...7.....7......|
[10304] 14:20:00:281: Type=26, Length=16, Value=
[10304] 14:20:00:281: 00 00 01 37 12 0C 4D 53 52 41 53 56 35 2E 32 30 |...7..MSRASV5.20|
[10304] 14:20:00:281: Type=61, Length=4, Value=0x5
[10304] 14:20:00:281: Type=64, Length=4, Value=0x1
[10304] 14:20:00:281: Type=65, Length=4, Value=0x1
[10304] 14:20:00:281: Type=31, Length=12, Value=
[10304] 14:20:00:281: 35 38 2E 31 31 30 2E 34 30 2E 36 34 00 00 00 00 |58.110.40.64....|
[10304] 14:20:00:281: Type=66, Length=12, Value=
[10304] 14:20:00:281: 35 38 2E 31 31 30 2E 34 30 2E 36 34 00 00 00 00 |58.110.40.64....|
[10304] 14:20:00:281: Type=26, Length=16, Value=
[10304] 14:20:00:281: 00 00 01 37 23 0C 4D 53 52 41 53 56 35 2E 31 30 |...7#.MSRASV5.10|
[10304] 14:20:00:281: Type=26, Length=20, Value=
[10304] 14:20:00:281: 00 00 01 37 22 10 4D 53 52 41 53 2D 30 2D 46 4C |...7".MSRAS-0-FL|
[10304] 14:20:00:281: 4F 57 45 52 00 00 00 00 00 00 00 00 00 00 00 00 |OWER............|
[10304] 14:20:00:281: Type=1, Length=3, Value=
[10304] 14:20:00:281: 77 73 31 00 00 00 00 00 00 00 00 00 00 00 00 00 |ws1.............|
[10304] 14:20:00:281: Type=26, Length=22, Value=
[10304] 14:20:00:281: 00 00 01 37 0B 12 62 C6 72 9D F8 FA C6 82 C2 00 |...7..b.r.......|
[10304] 14:20:00:281: 08 F5 24 38 88 60 00 00 00 00 00 00 00 00 00 00 |..$8.`..........|
[10304] 14:20:00:281: Type=26, Length=56, Value=
[10304] 14:20:00:281: 00 00 01 37 19 34 00 00 CD C6 1F 66 D7 8C 72 2D |...7.4.....f..r-|
[10304] 14:20:00:281: C8 F3 44 82 FD 83 61 4B 00 00 00 00 00 00 00 00 |..D...aK........|
[10304] 14:20:00:281: DE 49 4E 2C D1 ED 8F A6 FA 0A 4C 69 46 C1 66 6A |.IN,......LiF.fj|
[10304] 14:20:00:281: 2A 78 F6 4C EA 9D 89 38 00 00 00 00 00 00 00 00 |*x.L...8........|
[10304] 14:20:00:328: Inserting attribute type 44
[10304] 14:20:00:328: Inserting attribute type 4
[10304] 14:20:00:328: Inserting attribute type 6
[10304] 14:20:00:328: Inserting attribute type 7
[10304] 14:20:00:328: Inserting attribute type 5
[10304] 14:20:00:328: Inserting attribute type 26
[10304] 14:20:00:328: Inserting attribute type 26
[10304] 14:20:00:328: Inserting attribute type 61
[10304] 14:20:00:328: Inserting attribute type 64
[10304] 14:20:00:328: Inserting attribute type 65
[10304] 14:20:00:328: Inserting attribute type 31
[10304] 14:20:00:328: Inserting attribute type 66
[10304] 14:20:00:328: Inserting attribute type 26
[10304] 14:20:00:328: Inserting attribute type 26
[10304] 14:20:00:328: Inserting attribute type 1
[10304] 14:20:00:328: Inserting attribute type 26
[10304] 14:20:00:328: Inserting attribute type 26
[10304] 14:20:00:328: Inserting attribute type 4108
[10304] 14:20:01:750: IASResponse = DISCARD_PACKET. Failurereason=0x50


RASCHAP.log

[5196] 08-24 14:20:00:140: ChapBegin(fS=1,bA=0x81)
[5196] 08-24 14:20:00:140: ChapBegin done.
[5196] 08-24 14:20:00:140: ChapMakeMessage,RBuf=00000000
[5196] 08-24 14:20:00:156: CS_Initial...
[5196] 08-24 14:20:00:156: MakeChallengeMessage...
01 00 00 1B 10 62 C6 72 9D F8 FA C6 82 C2 00 08 |.....b.r........|
F5 24 38 88 60 50 4F 53 50 44 43 00 00 00 00 00 |.$8.`POSPDC.....|
[5196] 08-24 14:20:00:265: ChapMakeMessage,RBuf=01983A6A
[5196] 08-24 14:20:00:265: CS_ChallengeSent...
[5196] 08-24 14:20:01:750: ChapMakeMessage,RBuf=00000000
[5196] 08-24 14:20:01:765: ChapEnd


RASMAN.log

[27268] 08-24 14:20:01:843: PortDisconnectRequest on VPN4-127 Connection=0x0 ,RasmanReceiveFlags=0x4
[27268] 08-24 14:20:01:843: PortDisconnectRequest: Disconnecting VPN4-127
[27268] 08-24 14:20:01:843: Disconnecting Port 0xVPN4-127, reason 0
[27268] 08-24 14:20:01:843: DisconnectPort: Saving Bundle stats for port VPN4-127
[27268] 08-24 14:20:01:843: d:\nt\net\rras\ras\rasman\rasman\util.c 1997: Disconnected Port 129, reason 0. rc=0x258
[27268] 08-24 14:20:01:843: FreeBundle: freeing pBundle=0x2a72d18
[27268] 08-24 14:20:01:843: d:\nt\net\rras\ras\rasman\rasman\util.c: 2218: port 129 state chg: prev=2, new=3
[27268] 08-24 14:20:01:843: d:\nt\net\rras\ras\rasman\rasman\util.c: 2288: port 129 async reqtype chg: prev=26, new=9
[4972] 08-24 14:20:01:843: OVEVT_RASMAN_ADJUST_TIMER
[4972] 08-24 14:20:01:843: OVEVT_RASMAN_ADJUST_TIMER
[27268] 08-24 14:20:01:843: Disconnect request on port: VPN4-127
[4972] 08-24 14:20:02:890: WorkerThread: Disconnect event signaled on port: VPN4-127
[4972] 08-24 14:20:02:890: OVEVT_DEV_STATECHANGE. pOverlapped = 0x2acc4a8
[4972] 08-24 14:20:02:890: d:\nt\net\rras\ras\rasman\rasman\request.c: 4723: port 129 state chg: prev=3, new=4
[4972] 08-24 14:20:02:890: d:\nt\net\rras\ras\rasman\rasman\request.c: 4734: port 129 async reqtype chg: prev=9, new=0
[4972] 08-24 14:20:02:890: CompleteDisconnectRequest: signalling 0x2280 for VPN4-127
[4972] 08-24 14:20:02:906: Disconnect completed on port: VPN4-127
[27268] 08-24 14:20:02:906: DeviceListenRequest: Clearing Autoclose flag on port VPN4-127
[27268] 08-24 14:20:02:906: d:\nt\net\rras\ras\rasman\rasman\util.c: 2552: port 129 state chg: prev=4, new=1
[27268] 08-24 14:20:02:906: d:\nt\net\rras\ras\rasman\rasman\util.c: 2583: port 129 async reqtype chg: prev=0, new=27
[27268] 08-24 14:20:02:906: Listen posted on port: VPN4-127, error code 600


RASTAPI.log

[27268] 08-24 14:20:01:843: PortDisconnect: VPN4-127
[27268] 08-24 14:20:01:843: InitiatePortDisconnection: VPN4-127
[27268] 08-24 14:20:01:843: WAN Miniport (PPTP) InClients=0, TotalDialInClients=0
[27268] 08-24 14:20:01:843: InitiatePortDisconnection: Changing state for VPN4-127 from 3 -> 5, id=0x1034a
[27268] 08-24 14:20:01:843:
[27268] 08-24 14:20:01:843:
[5136] 08-24 14:20:02:843: RasTapicallback: msg=2 , param1=16384l , param2=0l
[5136] 08-24 14:20:02:843: RasTapicallback: linecallstate=0x4000
[5136] 08-24 14:20:02:843: RasTapiCallback: LINECALLSTATE - initiating Port Disconnect
[5136] 08-24 14:20:02:843: InitiatePortDisconnection: VPN4-127
[5136] 08-24 14:20:02:843: InitiatePortDisconnection: Changing state for VPN4-127 from 5 -> 5, id=0x1029f
[5136] 08-24 14:20:02:843:
[5136] 08-24 14:20:02:843: RasTapicallback: msg=2 , param1=1l , param2=0l
[5136] 08-24 14:20:02:843: RasTapicallback: linecallstate=0x1
[5136] 08-24 14:20:02:843: RasTapicallback: msg=12 , param1=66378l , param2=0l
[5136] 08-24 14:20:02:843: LINE_REPLY. param1=0x1034a
[5136] 08-24 14:20:02:890: PortByRequestId found
[5136] 08-24 14:20:02:890: RasTapicallback: msg=12 , param1=66207l , param2=0l
[5136] 08-24 14:20:02:890: LINE_REPLY. param1=0x1029f
[5136] 08-24 14:20:02:890: RasTapiCallback: lineDropped. port VPN4-127, id=0xffffffff
[5136] 08-24 14:20:02:890: RasTapiCallback: Idle Received for port VPN4-127
[5136] 08-24 14:20:02:890: RasTapiCallback: changing state of VPN4-127. 5 -> 1
[5136] 08-24 14:20:02:890: RasTapiCallback: lineDeallocateCall for VPN4-127,hcall = 0x10328
[4972] 08-24 14:20:02:890: PortTestSignalState: DeviceState = 0
[27268] 08-24 14:20:02:906: DeviceListen: Changing State for VPN4-127 from 1 -> 2
[27268] 08-24 14:20:02:906: DeviceListen: Changing Listen State for VPN4-127 from 4 -> 2
[27268] 08-24 14:20:02:906:

I can see errors but jut don't know where to look for the answer.
Louise
 
Posts: 5
Joined: Tue Aug 21, 2007 8:14 pm
Location: Brisbane

Postby chicagotech » Thu Aug 30, 2007 10:44 am

Please check the Event Viewer for any errors.
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
chicagotech
Site Admin
 
Posts: 6673
Joined: Mon Nov 27, 2006 1:24 pm
Location: Chicago USA

Postby Louise » Thu Aug 30, 2007 6:48 pm

Ok under event log_System I have found this:

Date: 24/08/07 Source: RemoteAccess
Time: 2:20:01pm Category: None
Type: Warning Event ID: 20014
User: N/A
Computer POSPDC

Description

The user ws1 has connected and failed to authenticate on port VPN4-127. The line has been disconnected.

However the Security log for the same time shows 4 successfull audit enteries for user ws1.

I have always thought that this issue is because the VPN user can't authenticate but why?
Louise
 
Posts: 5
Joined: Tue Aug 21, 2007 8:14 pm
Location: Brisbane

Postby chicagotech » Thu Aug 30, 2007 11:32 pm

It is account security issue. I reviewed another case we had. That may help you. Check this link,

VPN error 691I
try to configure RAS on it for VPN and dial-in. Everything work fine during installation. I try to connect via vpn and dial-in and it give me an error 691 ...
www.chicagotech.net/Q&A/vpn43.htm
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
chicagotech
Site Admin
 
Posts: 6673
Joined: Mon Nov 27, 2006 1:24 pm
Location: Chicago USA

Postby Louise » Fri Aug 31, 2007 12:19 am

Good idea, but I've already read that one and may settings are ok.
Louise
 
Posts: 5
Joined: Tue Aug 21, 2007 8:14 pm
Location: Brisbane

Postby chicagotech » Fri Aug 31, 2007 8:05 am

Have you tried domainname\username format?
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
chicagotech
Site Admin
 
Posts: 6673
Joined: Mon Nov 27, 2006 1:24 pm
Location: Chicago USA


Return to VPN, TS and Remote Access

Your Ad Here

Who is online

Users browsing this forum: No registered users and 3 guests