Event ID 20171 — RRAS IPsec Configuration

Applies To: Windows Server 2008

For L2TP-based virtual private networking (VPN) connections, a certificate infrastructure is required to issue computer certificates used to negotiate authentication for Internet Protocol security (IPsec). If a computer certificate required for IPsec is not available, the connection will fail.

 

Event Details

Product: Windows Operating System
ID: 20171
Source: RemoteAccess
Version: 6.0
Symbolic Name: ROUTERLOG_IPSEC_FILTER_FAILURE
Message: Failed to apply IP security on port: %1 because of error: %2. No calls will be accepted to this port.

Resolve

Review the remote access service error code

There is not enough information available in the Routing and Remote Access service event message to provide a recommendation for the resolution of the problem. If you continue to get this error, contact Microsoft Product Support Services. For more information, see https://go.microsoft.com/fwlink/?LinkId=52267.

For more information about remote access service error codes, see article 163111 in the Microsoft Knowledge Base (https://go.microsoft.com/fwlink/?LinkID=91455).

Verify

To verify that the remote access server can accept connections, establish a remote access connection from a client computer.

To create a VPN connection:

  1. Click Start, and then click Control Panel.
  2. Click Network and Internet, click Network and Sharing Center, and then click Set up a connection or network.
  3. Click Connect to a workplace, and then click Next.
  4. Complete the steps in the Connect to a Workplace wizard.

To connect to a remote access server:

  1. In Network and Sharing Center, click Manage network connections.
  2. Double-click the VPN connection, and then click Connect.
  3. Verify that the connection was established successfully.

RRAS IPsec Configuration

Routing and Remote Access Service Infrastructure