Draytek Router to SBS2k server problem

[antonycat]

I am trying to setup a site to site VPN from an ADSL Draytek 2600 router (Remote site with Static Public IP Address, DHCP server for remote LAN) to our SBS2K server (Head Office with different Static Public IP Address).

I have run the Local ISA VPN Server Wizard on the SBS and have set it up that the SBS can both initiate a connection to the remote Draytek router as well as act as a server from the router. I have setup a LAN to LAN profile on the Draytek router to only Dial-Out at the moment with no timeout. The username for connecting to the VPN Demand Dial Interface is the user that the SBS VPN wizard created but I had to reset the password for the username within Active Directory. The Demand-Dial interface on the SBS is set to a persistent connection.

The LAN IP address of the router is different to the SBS.

When I try and ‘Dial’ the VPN link to the SBS I keep on getting the following 2 system event errors in the SBS system log and cannot establish a permanent VPN link and am not sure why ?

Source: Remote Access
Event Id: 20050
Description:
The user OURDOMAINNAME\username connected to port VPN3-3 has been disconnected because no network protocols were successfully negotiated.

Source: Remote Access
Event Id: 20049
Description:
The user connected to port VPN3-3 has been disconnected because the authentication process did not complete within the required amount of time.

Any help would be greatly appreciated.

Thanks in advance.
Antony

 

[nsvoy]

i suggest firstly Stop the isa server (so will will have no firewall to intercept your packets)
then try again the connection.
If now (with no isa) you can connect the problem is with isa
if not the problem is the configuration firstly of vpn server and then with the drayteck router.

Tell me what happened

 

[pmf71]

check this link:

http://support.microsoft.com/default.aspx?scid=kb;en-us;252735

It describes how to use IPSec policies for a site to site tunnel. Originally it's for two win2k or xp machines, but i have succesfully made a connection between win2k and a draytek vigor 2600 using this solution. it takes a bit of working out, i broke my head over it at first but once u get the hang of it, it's a really good, stable and safe way of creating a WAN.