VPN Clients cannot connect
Hi Guys,
VPN clients cannot connect to a Windows 2003 server for some reason. No firewall in place.
Please see logs:
Router.log
[28468] 01-16 08:18:29:096: Rasman state change received from port 128, 5->2
[28468] 01-16 08:18:29:096: SvDevConnected: Entered, hPort=128
[28468] 01-16 08:18:29:096: TimerQRemove called
[28468] 01-16 08:18:29:112: SvFrameReceived: Entered, hPort: 128
[28468] 01-16 08:18:29:112: SvFrameReceived: PPP frame on port 128
[6712] 01-16 08:18:29:221: ServerSendMessage on port/connection: 80 from: PPP Message: PPPDDMMSG_PppFailure
[28468] 01-16 08:18:29:221: ServerReceiveMessage on port/connection: 80 from: PPP Message: PPPDDMMSG_PppFailure
[28468] 01-16 08:18:29:221: SvPppFailure: Entered, hPort=128, Error=649
[6712] 01-16 08:18:29:237: ServerSendMessage on port/connection: 80 from: PPP Message: PPPDDMMSG_Stopped
[28468] 01-16 08:18:29:237: ServerReceiveMessage on port/connection: 80 from: PPP Message: PPPDDMMSG_Stopped
[28468] 01-16 08:18:29:237: DevStartClosing: Entered, hPort=128
[28468] 01-16 08:18:29:237: RmDisconnect:Disconnect posted on port 128
[28468] 01-16 08:18:29:237: RasPortDisconnect rc=600
[28468] 01-16 08:18:29:237: TimerQRemove called
[28468] 01-16 08:18:29:237: TimerQRemove called
[28468] 01-16 08:18:29:237: TimerQRemove called
[28468] 01-16 08:18:29:237: DevCloseComplete:hPort=128,Auth=0,Rcv=0,Conn=1 1,Sec=3 2,Ppp=0
[28468] 01-16 08:18:29:268: Rasman state change received from port 128, 3->4
[28468] 01-16 08:18:29:268: SvDevDisconnected:Entered, hPort=128
[28468] 01-16 08:18:29:268: DevCloseComplete:hPort=128,Auth=0,Rcv=0,Conn=1 0,Sec=4 2,Ppp=0
[28468] 01-16 08:18:29:268: RmListen: Listen posted on port 128
[6712] 01-16 08:18:29:268: ServerSendMessage on port/connection: 80 from: PPP Message: PPPDDMMSG_PortCleanedUp
[28468] 01-16 08:18:29:268: RasPortListen dwRetCode=600
[28468] 01-16 08:18:29:268: ServerReceiveMessage on port/connection: 80 from: PPP Message: PPPDDMMSG_PortCleanedUp
rasman.log
[4924] 01-16 08:18:29:080: WorkerThread: Async work event signaled on port: VPN4-127
[4924] 01-16 08:18:29:080: OVEVT_DEV_ASYNCOP. pOverlapped = 0x6c3d498
[4924] 01-16 08:18:29:080: ServiceWorkRequest: Async op event 27 for port VPN4-127 returned 600
[4924] 01-16 08:18:29:080: WorkerThread: Async work event signaled on port: VPN4-127
[4924] 01-16 08:18:29:080: OVEVT_DEV_ASYNCOP. pOverlapped = 0x6c3d498
[4924] 01-16 08:18:29:080: ServiceWorkRequest: Async op event 27 for port VPN4-127 returned 600
[4924] 01-16 08:18:29:080: WorkerThread: Async work event signaled on port: VPN4-127
[4924] 01-16 08:18:29:080: OVEVT_DEV_ASYNCOP. pOverlapped = 0x6c3d498
[4924] 01-16 08:18:29:080: d:\nt\net\rras\ras\rasman\rasman\request.c: 7623: port 128 state chg: prev=1, new=5
[4924] 01-16 08:18:29:080: RasmanReceiveFlags = 0x0
[4924] 01-16 08:18:29:080: d:\nt\net\rras\ras\rasman\rasman\worker.c: 2356: port 128 async reqtype chg: prev=27, new=0
[4924] 01-16 08:18:29:080: ServiceWorkRequest: Async op event 27 for port VPN4-127 returned 0
[28468] 01-16 08:18:29:080: ConnectCompleteRequest: entered for port 128
[28468] 01-16 08:18:29:096: d:\nt\net\rras\ras\rasman\rasman\request.c: 7499: port 128 state chg: prev=5, new=2
[28468] 01-16 08:18:29:096: AllocBundle: pBundle=0x97a0fd0
[28468] 01-16 08:18:29:096: d:\nt\net\rras\ras\rasman\rasman\request.c 9017: Mapping Cookie to handle. port = VPN4-127(0x5854608), Bundlehandle = 0x22, linkhandle = 0x22
[28468] 01-16 08:18:29:096: DwSaveIpAddressInfo: pszAddress=202.68.89.178
[28468] 01-16 08:18:29:096: ConnectCompleteRequest: DwSaveIpAddressInfo returned 0x0
[28468] 01-16 08:18:29:096: Connection Completed on port: VPN4-127, error code: 0
[28468] 01-16 08:18:29:096: d:\nt\net\rras\ras\rasman\rasman\request.c: 6691: port 128 async reqtype chg: prev=0, new=26
[4924] 01-16 08:18:29:112: Completed receive - First Frame on VPN4-127, handle=0x2848
[6712] 01-16 08:18:29:112: GetConnectInfo: port VPN4-127
[6712] 01-16 08:18:29:112: GetConnectInfo: size=52, rc=0xx0
[6712] 01-16 08:18:29:112: GetConnectInfo: port VPN4-127
[6712] 01-16 08:18:29:112: GetConnectInfo: size=52, rc=0xx0
[6712] 01-16 08:18:29:112: GetConnectInfo: port VPN4-127
[6712] 01-16 08:18:29:112: GetConnectInfo: size=52, rc=0xx0
[6712] 01-16 08:18:29:112: GetConnectInfo: port VPN4-127
[6712] 01-16 08:18:29:112: GetConnectInfo: size=52, rc=0xx0
[6712] 01-16 08:18:29:112: PppStarted...VPN4-127
[6712] 01-16 08:18:29:112: PortReceive: Invalid SendRcvBuffer passed
[28468] 01-16 08:18:29:237: PortDisconnectRequest on VPN4-127 Connection=0x0 ,RasmanReceiveFlags=0x4
[28468] 01-16 08:18:29:237: PortDisconnectRequest: Disconnecting VPN4-127
[28468] 01-16 08:18:29:237: Disconnecting Port 0xVPN4-127, reason 0
[28468] 01-16 08:18:29:237: DisconnectPort: Saving Bundle stats for port VPN4-127
[28468] 01-16 08:18:29:237: d:\nt\net\rras\ras\rasman\rasman\util.c 1997: Disconnected Port 128, reason 0. rc=0x258
[28468] 01-16 08:18:29:237: FreeBundle: freeing pBundle=0x97a0fd0
[28468] 01-16 08:18:29:237: d:\nt\net\rras\ras\rasman\rasman\util.c: 2218: port 128 state chg: prev=2, new=3
[28468] 01-16 08:18:29:237: d:\nt\net\rras\ras\rasman\rasman\util.c: 2288: port 128 async reqtype chg: prev=26, new=9
[28468] 01-16 08:18:29:237: Disconnect request on port: VPN4-127
[4924] 01-16 08:18:29:237: OVEVT_RASMAN_ADJUST_TIMER
[4924] 01-16 08:18:29:237: OVEVT_RASMAN_ADJUST_TIMER
[4924] 01-16 08:18:29:268: WorkerThread: Disconnect event signaled on port: VPN4-127
[4924] 01-16 08:18:29:268: OVEVT_DEV_STATECHANGE. pOverlapped = 0x6c3d4d8
[4924] 01-16 08:18:29:268: d:\nt\net\rras\ras\rasman\rasman\request.c: 4723: port 128 state chg: prev=3, new=4
[4924] 01-16 08:18:29:268: d:\nt\net\rras\ras\rasman\rasman\request.c: 4734: port 128 async reqtype chg: prev=9, new=0
[4924] 01-16 08:18:29:268: CompleteDisconnectRequest: signalling 0x2848 for VPN4-127
[4924] 01-16 08:18:29:268: Disconnect completed on port: VPN4-127
[28468] 01-16 08:18:29:268: DeviceListenRequest: Clearing Autoclose flag on port VPN4-127
[28468] 01-16 08:18:29:268: d:\nt\net\rras\ras\rasman\rasman\util.c: 2552: port 128 state chg: prev=4, new=1
[28468] 01-16 08:18:29:268: d:\nt\net\rras\ras\rasman\rasman\util.c: 2583: port 128 async reqtype chg: prev=0, new=27
[28468] 01-16 08:18:29:268: Listen posted on port: VPN4-127, error code 600
rasauth.log
[28456] 08:18:29:221: RasAuthProviderAuthenticateUser called
[28456] 08:18:29:221: Type=44, Length=2, Value=
[28456] 08:18:29:221: 33 36 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |36..............|
[28456] 08:18:29:221: Type=4, Length=4, Value=0xc0a8010a
[28456] 08:18:29:221: Type=6, Length=4, Value=0x2
[28456] 08:18:29:221: Type=7, Length=4, Value=0x1
[28456] 08:18:29:221: Type=5, Length=4, Value=0x80
[28456] 08:18:29:221: Type=26, Length=10, Value=
[28456] 08:18:29:221: 00 00 01 37 09 06 00 00 01 37 00 00 00 00 00 00 |...7.....7......|
[28456] 08:18:29:221: Type=26, Length=16, Value=
[28456] 08:18:29:221: 00 00 01 37 12 0C 4D 53 52 41 53 56 35 2E 32 30 |...7..MSRASV5.20|
[28456] 08:18:29:221: Type=61, Length=4, Value=0x5
[28456] 08:18:29:221: Type=64, Length=4, Value=0x1
[28456] 08:18:29:221: Type=65, Length=4, Value=0x1
[28456] 08:18:29:221: Type=31, Length=13, Value=
[28456] 08:18:29:221: 32 30 32 2E 36 38 2E 38 39 2E 31 37 38 00 00 00 |202.68.89.178...|
[28456] 08:18:29:221: Type=66, Length=13, Value=
[28456] 08:18:29:221: 32 30 32 2E 36 38 2E 38 39 2E 31 37 38 00 00 00 |202.68.89.178...|
[28456] 08:18:29:221: Type=26, Length=16, Value=
[28456] 08:18:29:221: 00 00 01 37 23 0C 4D 53 52 41 53 56 35 2E 32 30 |...7#.MSRASV5.20|
[28456] 08:18:29:221: Type=26, Length=19, Value=
[28456] 08:18:29:221: 00 00 01 37 22 0F 4D 53 52 41 53 2D 30 2D 4C 33 |...7".MSRAS-0-L3|
[28456] 08:18:29:221: 44 30 31 00 00 00 00 00 00 00 00 00 00 00 00 00 |D01.............|
[28456] 08:18:29:221: Type=1, Length=20, Value=
[28456] 08:18:29:221: 4E 5A 44 41 54 41 5C 61 64 6D 69 6E 69 73 74 72 |NZDATA\administr|
[28456] 08:18:29:221: 61 74 6F 72 00 00 00 00 00 00 00 00 00 00 00 00 |ator............|
[28456] 08:18:29:221: Type=26, Length=22, Value=
[28456] 08:18:29:221: 00 00 01 37 0B 12 CF 13 03 23 CE E1 09 A7 38 1B |...7.....#....8.|
[28456] 08:18:29:221: E5 7B E5 6F 1D 88 00 00 00 00 00 00 00 00 00 00 |.{.o............|
[28456] 08:18:29:221: Type=26, Length=56, Value=
[28456] 08:18:29:221: 00 00 01 37 19 34 00 00 6B 0B 9F BF 9A 28 52 72 |...7.4..k....(Rr|
[28456] 08:18:29:221: 63 A4 EA 9A BA 2A 9C 53 00 00 00 00 00 00 00 00 |c....*.S........|
[28456] 08:18:29:221: 9D E7 8F 01 D2 B1 A7 92 99 24 5F FE 8A 7D 76 91 |.........$_..}v.|
[28456] 08:18:29:221: 13 DE 46 5C 96 B4 C3 BE 00 00 00 00 00 00 00 00 |..F\............|
[28456] 08:18:29:221: Inserting attribute type 44
[28456] 08:18:29:221: Inserting attribute type 4
[28456] 08:18:29:221: Inserting attribute type 6
[28456] 08:18:29:221: Inserting attribute type 7
[28456] 08:18:29:221: Inserting attribute type 5
[28456] 08:18:29:221: Inserting attribute type 26
[28456] 08:18:29:221: Inserting attribute type 26
[28456] 08:18:29:221: Inserting attribute type 61
[28456] 08:18:29:221: Inserting attribute type 64
[28456] 08:18:29:221: Inserting attribute type 65
[28456] 08:18:29:221: Inserting attribute type 31
[28456] 08:18:29:221: Inserting attribute type 66
[28456] 08:18:29:221: Inserting attribute type 26
[28456] 08:18:29:221: Inserting attribute type 26
[28456] 08:18:29:221: Inserting attribute type 1
[28456] 08:18:29:221: Inserting attribute type 26
[28456] 08:18:29:221: Inserting attribute type 26
[28456] 08:18:29:221: Inserting attribute type 4108
[28456] 08:18:29:221: IASResponse = 2, FailureReason = 0x30
[28456] 08:18:29:221: Received attribute 26
[28456] 08:18:29:221: Type=26, Length=20, Value=
[28456] 08:18:29:221: 00 00 01 37 02 10 00 45 3D 36 34 39 20 52 3D 30 |...7...E=649 R=0|
[28456] 08:18:29:221: 20 56 3D 33 00 00 00 00 00 00 00 00 00 00 00 00 | V=3............|
ppp.log
[6712] 01-16 08:18:29:112: Line up event occurred on port 128
[6712] 01-16 08:18:29:112: PortName: VPN4-127
[6712] 01-16 08:18:29:112: Starting PPP on link with IfType=0x0,IPIf=0x0,IPXIf=0x0
[6712] 01-16 08:18:29:112: RasGetBuffer returned 7036fa8 for SendBuf
[6712] 01-16 08:18:29:112: FsmInit called for protocol = c021, port = 128
[6712] 01-16 08:18:29:112: ConfigInfo = 80a70a
[6712] 01-16 08:18:29:112: APs available = 7
[6712] 01-16 08:18:29:112: FsmReset called for protocol = c021, port = 128
[6712] 01-16 08:18:29:112: Inserting port in bucket # 6
[6712] 01-16 08:18:29:112: Inserting bundle in bucket # 10
[6712] 01-16 08:18:29:112: FsmOpen event received for protocol c021 on port 128
[6712] 01-16 08:18:29:112: FsmThisLayerStarted called for protocol = c021, port = 128
[6712] 01-16 08:18:29:112: FsmUp event received for protocol c021 on port 128
[6712] 01-16 08:18:29:112: <PPP packet sent at 01/15/2012 19:18:29:112
[6712] 01-16 08:18:29:112: <Protocol = LCP, Type = Configure-Req, Length = 0x3a, Id = 0x0, Port = 128
[6712] 08:18:29:112: <C0 21 01 00 00 38 01 04 05 78 03 04 C2 27 05 06 |.!...8...x...'..|
[6712] 08:18:29:112: <28 03 67 3B 07 02 08 02 0D 03 06 11 04 06 4E 13 |(.g;..........N.|
[6712] 08:18:29:112: <17 01 BB 41 28 F0 DF 82 4F 27 97 A0 C8 D4 6D 19 |...A(...O'....m.|
[6712] 08:18:29:112: <18 66 00 00 00 00 17 04 00 21 00 00 00 00 00 00 |.f.......!......|
[6712] 01-16 08:18:29:112:
[6712] 01-16 08:18:29:112: InsertInTimerQ called portid=66,Id=0,Protocol=c021,EventType=0,fAuth=0
[6712] 01-16 08:18:29:112: InsertInTimerQ called portid=66,Id=0,Protocol=0,EventType=3,fAuth=0
[6712] 01-16 08:18:29:112: >PPP packet received at 01/15/2012 19:18:29:112
[6712] 01-16 08:18:29:112: >Protocol = LCP, Type = Configure-Req, Length = 0x17, Id = 0x0, Port = 128
[6712] 08:18:29:112: >C0 21 01 00 00 15 01 04 05 78 05 06 6A A3 62 22 |.!.......x..j.b"|
[6712] 08:18:29:112: >07 02 08 02 0D 03 06 00 00 00 00 00 00 00 00 00 |................|
[6712] 01-16 08:18:29:112:
[6712] 01-16 08:18:29:112: <PPP packet sent at 01/15/2012 19:18:29:112
[6712] 01-16 08:18:29:112: <Protocol = LCP, Type = Configure-Ack, Length = 0x17, Id = 0x0, Port = 128
[6712] 08:18:29:112: <C0 21 02 00 00 15 01 04 05 78 05 06 6A A3 62 22 |.!.......x..j.b"|
[6712] 08:18:29:112: <07 02 08 02 0D 03 06 00 00 00 00 00 00 00 00 00 |................|
[6712] 01-16 08:18:29:112:
[4924] 01-16 08:18:29:143: Packet received (37 bytes) for hPort 128
[6712] 01-16 08:18:29:143: >PPP packet received at 01/15/2012 19:18:29:143
[6712] 01-16 08:18:29:143: >Protocol = LCP, Type = Configure-Reject, Length = 0x25, Id = 0x0, Port = 128
[6712] 08:18:29:143: >C0 21 04 00 00 23 11 04 06 4E 13 17 01 BB 41 28 |.!...#...N....A(|
[6712] 08:18:29:143: >F0 DF 82 4F 27 97 A0 C8 D4 6D 19 18 66 00 00 00 |...O'....m..f...|
[6712] 08:18:29:143: >00 17 04 00 21 00 00 00 00 00 00 00 00 00 00 00 |....!...........|
[6712] 01-16 08:18:29:143:
[6712] 01-16 08:18:29:143: RemoveFromTimerQ called portid=66,Id=0,Protocol=c021,EventType=0,fAuth=0
[6712] 01-16 08:18:29:143: <PPP packet sent at 01/15/2012 19:18:29:143
[6712] 01-16 08:18:29:143: <Protocol = LCP, Type = Configure-Req, Length = 0x1b, Id = 0x1, Port = 128
[6712] 08:18:29:143: <C0 21 01 01 00 19 01 04 05 78 03 04 C2 27 05 06 |.!.......x...'..|
[6712] 08:18:29:143: <28 03 67 3B 07 02 08 02 0D 03 06 00 00 00 00 00 |(.g;............|
[6712] 01-16 08:18:29:143:
[6712] 01-16 08:18:29:143: InsertInTimerQ called portid=66,Id=1,Protocol=c021,EventType=0,fAuth=0
[4924] 01-16 08:18:29:174: Packet received (11 bytes) for hPort 128
[6712] 01-16 08:18:29:174: >PPP packet received at 01/15/2012 19:18:29:174
[6712] 01-16 08:18:29:174: >Protocol = LCP, Type = Configure-Nak, Length = 0xb, Id = 0x1, Port = 128
[6712] 08:18:29:174: >C0 21 03 01 00 09 03 05 C2 23 81 00 00 00 00 00 |.!.......#......|
[6712] 01-16 08:18:29:174:
[6712] 01-16 08:18:29:174: RemoveFromTimerQ called portid=66,Id=1,Protocol=c021,EventType=0,fAuth=0
[6712] 01-16 08:18:29:174: <PPP packet sent at 01/15/2012 19:18:29:174
[6712] 01-16 08:18:29:174: <Protocol = LCP, Type = Configure-Req, Length = 0x1c, Id = 0x2, Port = 128
[6712] 08:18:29:174: <C0 21 01 02 00 1A 01 04 05 78 03 05 C2 23 81 05 |.!.......x...#..|
[6712] 08:18:29:174: <06 28 03 67 3B 07 02 08 02 0D 03 06 00 00 00 00 |.(.g;...........|
[6712] 01-16 08:18:29:174:
[6712] 01-16 08:18:29:174: InsertInTimerQ called portid=66,Id=2,Protocol=c021,EventType=0,fAuth=0
[4924] 01-16 08:18:29:190: Packet received (28 bytes) for hPort 128
[6712] 01-16 08:18:29:190: >PPP packet received at 01/15/2012 19:18:29:190
[6712] 01-16 08:18:29:190: >Protocol = LCP, Type = Configure-Ack, Length = 0x1c, Id = 0x2, Port = 128
[6712] 08:18:29:190: >C0 21 02 02 00 1A 01 04 05 78 03 05 C2 23 81 05 |.!.......x...#..|
[6712] 08:18:29:190: >06 28 03 67 3B 07 02 08 02 0D 03 06 00 00 00 00 |.(.g;...........|
[6712] 01-16 08:18:29:190:
[6712] 01-16 08:18:29:190: RemoveFromTimerQ called portid=66,Id=2,Protocol=c021,EventType=0,fAuth=0
[6712] 01-16 08:18:29:190: FsmThisLayerUp called for protocol = c021, port = 128
[6712] 01-16 08:18:29:190: LCP Local Options-------------
[6712] 01-16 08:18:29:190: MRU=1400,ACCM=-1,Auth=c223,MagicNumber=671311675,PFC=ON,ACFC=ON
[6712] 01-16 08:18:29:190: Recv Framing = PPP,SSHF=OFF,MRRU=1500,LinkDiscrim=21,BAP=OFF
[6712] 01-16 08:18:29:190: LCP Remote Options-------------
[6712] 01-16 08:18:29:190: MRU=1400,ACCM=-1,Auth=0,MagicNumber=1789092386,PFC=ON,ACFC=ON
[6712] 01-16 08:18:29:190: Send Framing = PPP,SSHF=OFF,MRRU=1500,LinkDiscrim=0
[6712] 01-16 08:18:29:190: LCP Configured successfully
[6712] 01-16 08:18:29:190: Authenticating phase started
[6712] 01-16 08:18:29:190: Calling APWork in APStart
[4924] 01-16 08:18:29:190: Packet received (20 bytes) for hPort 128
[4924] 01-16 08:18:29:190: Packet received (23 bytes) for hPort 128
[6712] 01-16 08:18:29:190: <PPP packet sent at 01/15/2012 19:18:29:190
[6712] 01-16 08:18:29:190: <Protocol = CHAP, Type = Protocol specific, Length = 0x1d, Id = 0x0, Port = 128
[6712] 08:18:29:190: <C2 23 01 00 00 1B 10 CF 13 03 23 CE E1 09 A7 38 |.#........#....8|
[6712] 08:18:29:190: <1B E5 7B E5 6F 1D 88 53 42 53 53 56 52 00 00 00 |..{.o..SBSSVR...|
[6712] 01-16 08:18:29:190:
[6712] 01-16 08:18:29:190: InsertInTimerQ called portid=66,Id=0,Protocol=c223,EventType=0,fAuth=1
[6712] 01-16 08:18:29:190: >PPP packet received at 01/15/2012 19:18:29:190
[6712] 01-16 08:18:29:190: >Protocol = LCP, Type = Identification, Length = 0x14, Id = 0x1, Port = 128
[6712] 08:18:29:190: >C0 21 0C 01 00 12 6A A3 62 22 4D 53 52 41 53 56 |.!....j.b"MSRASV|
[6712] 08:18:29:190: >35 2E 32 30 00 00 00 00 00 00 00 00 00 00 00 00 |5.20............|
[6712] 01-16 08:18:29:190:
[6712] 01-16 08:18:29:190: Identification packet received
[6712] 01-16 08:18:29:190: Remote identification = MSRASV5.20
[6712] 01-16 08:18:29:190: >PPP packet received at 01/15/2012 19:18:29:190
[6712] 01-16 08:18:29:190: >Protocol = LCP, Type = Identification, Length = 0x17, Id = 0x2, Port = 128
[6712] 08:18:29:190: >C0 21 0C 02 00 15 6A A3 62 22 4D 53 52 41 53 2D |.!....j.b"MSRAS-|
[6712] 08:18:29:190: >30 2D 4C 33 44 30 31 00 00 00 00 00 00 00 00 00 |0-L3D01.........|
[6712] 01-16 08:18:29:190:
[6712] 01-16 08:18:29:190: Identification packet received
[6712] 01-16 08:18:29:190: Remote identification = MSRAS-0-L3D01
[4924] 01-16 08:18:29:190: Packet received (26 bytes) for hPort 128
[6712] 01-16 08:18:29:190: >PPP packet received at 01/15/2012 19:18:29:190
[6712] 01-16 08:18:29:190: >Protocol = LCP, Type = Identification, Length = 0x1a, Id = 0x3, Port = 128
[6712] 08:18:29:190: >C0 21 0C 03 00 18 6A A3 62 22 F8 C8 92 20 5B 6E |.!....j.b"... [n|
[6712] 08:18:29:190: >BD 4D B7 36 3B 61 98 EA F0 27 00 00 00 00 00 00 |.M.6;a...'......|
[6712] 01-16 08:18:29:190:
[6712] 01-16 08:18:29:190: Identification packet received
[6712] 01-16 08:18:29:190: ReceiveIndication: ClientVersion already present for port 128
[4924] 01-16 08:18:29:221: Packet received (76 bytes) for hPort 128
[6712] 01-16 08:18:29:221: >PPP packet received at 01/15/2012 19:18:29:221
[6712] 01-16 08:18:29:221: >Protocol = CHAP, Type = Protocol specific, Length = 0x4c, Id = 0x0, Port = 128
[6712] 08:18:29:221: >C2 23 02 00 00 4A 31 6B 0B 9F BF 9A 28 52 72 63 |.#...J1k....(Rrc|
[6712] 08:18:29:221: >A4 EA 9A BA 2A 9C 53 00 00 00 00 00 00 00 00 9D |....*.S.........|
[6712] 08:18:29:221: >E7 8F 01 D2 B1 A7 92 99 24 5F FE 8A 7D 76 91 13 |........$_..}v..|
[6712] 08:18:29:221: >DE 46 5C 96 B4 C3 BE 00 4E 5A 44 41 54 41 5C 61 |.F\.....NZDATA\a|
[6712] 08:18:29:221: >64 6D 69 6E 69 73 74 72 61 74 6F 72 00 00 00 00 |dministrator....|
[6712] 01-16 08:18:29:221:
[6712] 01-16 08:18:29:221: RemoveFromTimerQ called portid=66,Id=0,Protocol=c223,EventType=0,fAuth=1
[6712] 01-16 08:18:29:221: <PPP packet sent at 01/15/2012 19:18:29:221
[6712] 01-16 08:18:29:221: <Protocol = CHAP, Type = Protocol specific, Length = 0x10, Id = 0x0, Port = 128
[6712] 08:18:29:221: <C2 23 04 00 00 0E 45 3D 36 34 39 20 52 3D 30 20 |.#....E=649 R=0 |
[6712] 01-16 08:18:29:221:
[6712] 01-16 08:18:29:221: Auth Protocol c223 terminated with error 649
[6712] 01-16 08:18:29:221: NotifyCaller(hPort=128, dwMsgId=14)
[28468] 01-16 08:18:29:221: PppDdmStop
[28468] 01-16 08:18:29:221: PPPEMSG_Stop recvd
[6712] 01-16 08:18:29:221: FsmClose event received for protocol c021 on port 128
[6712] 01-16 08:18:29:221: RemoveFromTimerQ called portid=66,Id=2,Protocol=c021,EventType=0,fAuth=0
[6712] 01-16 08:18:29:221: FsmThisLayerDown called for protocol = c021, port = 128
[6712] 01-16 08:18:29:221: RemoveFromTimerQ called portid=66,Id=0,Protocol=c029,EventType=0,fAuth=0
[6712] 01-16 08:18:29:221: <PPP packet sent at 01/15/2012 19:18:29:221
[6712] 01-16 08:18:29:221: <Protocol = LCP, Type = Terminate-Req, Length = 0x12, Id = 0x4, Port = 128
[6712] 08:18:29:221: <C0 21 05 04 00 10 28 03 67 3B 00 3C CD 74 00 00 |.!....(.g;.<.t..|
[6712] 08:18:29:221: <02 89 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
[6712] 01-16 08:18:29:221:
[6712] 01-16 08:18:29:221: InsertInTimerQ called portid=66,Id=4,Protocol=c021,EventType=0,fAuth=0
[4924] 01-16 08:18:29:237: Packet received (18 bytes) for hPort 128
[6712] 01-16 08:18:29:237: >PPP packet received at 01/15/2012 19:18:29:237
[6712] 01-16 08:18:29:237: >Protocol = LCP, Type = Terminate-Ack, Length = 0x12, Id = 0x4, Port = 128
[6712] 08:18:29:237: >C0 21 06 04 00 10 28 03 67 3B 00 3C CD 74 00 00 |.!....(.g;.<.t..|
[6712] 08:18:29:237: >02 89 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
[6712] 01-16 08:18:29:237:
[6712] 01-16 08:18:29:237: RemoveFromTimerQ called portid=66,Id=4,Protocol=c021,EventType=0,fAuth=0
[6712] 01-16 08:18:29:237: FsmThisLayerFinished called for protocol = c021, port = 128
[6712] 01-16 08:18:29:237: NotifyCaller(hPort=128, dwMsgId=18)
[4924] 01-16 08:18:29:268: PPPEMSG_LineDown recvd, hPort=128
[6712] 01-16 08:18:29:268: Line down event occurred on port 128
[6712] 01-16 08:18:29:268: FsmDown event received for protocol c021 on port 128
[6712] 01-16 08:18:29:268: RemoveFromTimerQ called portid=66,Id=4,Protocol=c021,EventType=0,fAuth=0
[6712] 01-16 08:18:29:268: FsmReset called for protocol = c021, port = 128
[6712] 01-16 08:18:29:268: RemoveFromTimerQ called portid=66,Id=0,Protocol=0,EventType=3,fAuth=0
[6712] 01-16 08:18:29:268: RemoveFromTimerQ called portid=66,Id=0,Protocol=0,EventType=7,fAuth=0
[6712] 01-16 08:18:29:268: RemoveFromTimerQ called portid=66,Id=0,Protocol=0,EventType=2,fAuth=0
[6712] 01-16 08:18:29:268: RemoveFromTimerQ called portid=66,Id=0,Protocol=0,EventType=1,fAuth=0
[6712] 01-16 08:18:29:268: RemoveFromTimerQ called portid=66,Id=0,Protocol=0,EventType=4,fAuth=0
[6712] 01-16 08:18:29:268: RemoveFromTimerQ called portid=66,Id=0,Protocol=c029,EventType=0,fAuth=0
[6712] 01-16 08:18:29:268: LcpEnd
[6712] 01-16 08:18:29:268: Post line down event occurred on port 128
[6712] 01-16 08:18:29:268: NotifyCaller(hPort=128, dwMsgId=23)
It was working... not sure what's happened?
January 15th, 2012 2:25pm
The user NZDATA\administrator has connected and failed to authenticate on port VPN4-127. The line has been disconnected.
The user NZDATA\administrator connected from 202.68.89.170 but failed an authentication attempt due to the following reason: The connection attempt did not match any remote access policy.
The user NZDATA\administrator connected from 202.68.89.170 but failed an authentication attempt due to the following reason: The client could not be authenticated because the Extensible Authentication Protocol (EAP) Type cannot be processed by the server.
Any ideas?? The policy seems fine... allows group Remote Operators, all protocols and all security.
Free Windows Admin Tool Kit Click here and download it now
January 15th, 2012 2:46pm
* Bump - Any ideas? It seems to be something with authentication protocols.
January 15th, 2012 4:53pm
How about sharing how it was solved????
Free Windows Admin Tool Kit Click here and download it now
July 14th, 2012 11:04am