Re: ISA 2004 as a VPN Server -- Plz help (45 Views)
Reply
Valued Contributor
Maaz
Posts: 1,229
Registered: ‎03-10-2004
Message 1 of 5 (45 Views)
Accepted Solution

ISA 2004 as a VPN Server -- Plz help

Hello Gurus,
vpn clients are unable to connect to VPN server(ISA 2004, Win 2003, with SP1), and following eror recieves:
Error 800: Unable to establish the vpn connection. The VPN server may be unreachable or Security parameters may not be configured properly for this connection

I configure ISA server 2004, as VPN server.
ON ISA 2004
-----------
Error message from Event Viewer:
Event Type: Error
Event Source: Microsoft Firewall
Event Category: None
Event ID: 14102
Date: 2/25/2006
Time: 10:41:59 PM
User: N/A
Computer: SERVER101
Description:
Failed to save the Routing and Remote Access service configuration in the registry. The registry key: System\CurrentControlSet\Services\RemoteAccess\Parameters\Ip, registry value: - could not be accessed for writing. The VPN configuration of the server is incomplete.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 05 00 00 00

Plz help
Regards
Maaz
Please use plain text.
Honored Contributor
Igor Karasik
Posts: 1,835
Registered: ‎03-04-2003
Message 2 of 5 (45 Views)

Re: ISA 2004 as a VPN Server -- Plz help

Maaz,
check that Network Service account had FULL control for System\CurrentControlSet\Services\RemoteAccess\Parameters\Ip key.

P.S. Just in case you didn't see it before: there is a great article "Enabling the ISA Server 2004 VPN Server"
http://www.isaserver.org/articles/2004vpnserver.html
Also, forum on this site http://forums.isaserver.org/ help me a lot with different ISA 2004 issues.
Please use plain text.
Valued Contributor
Maaz
Posts: 1,229
Registered: ‎03-10-2004
Message 3 of 5 (45 Views)

Re: ISA 2004 as a VPN Server -- Plz help

Thanks
How can I check it that
Network Service account had FULL control for System\CurrentControlSet\Services\RemoteAccess\Parameters\Ip

Igor i m going to check the links.

Regards
Maaz
Please use plain text.
Honored Contributor
Igor Karasik
Posts: 1,835
Registered: ‎03-04-2003
Message 4 of 5 (45 Views)

Re: ISA 2004 as a VPN Server -- Plz help

Open "regedit.exe" (registry editor) from command prompt, go to My computer\HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\RemoteAccess\Parameters\Ip,
right click on IP key and select "Permissions". In "Permissions for IP" window check that Network Service account had FULL control.
Please use plain text.
Valued Contributor
Maaz
Posts: 1,229
Registered: ‎03-10-2004
Message 5 of 5 (45 Views)

Re: ISA 2004 as a VPN Server -- Plz help

SP1 of ISA 2004 is the remedy/solution
Thanks n Regards
Maaz
Please use plain text.
The opinions expressed above are the personal opinions of the authors, not of HP. By using this site, you accept the Terms of Use and Rules of Participation