VPN constant disconnects
 

Hello All,

I'm at a loss with this one, I hope someone has some ideas.
Besides a format c:\ install Linux


Trying to help a user out with VPN issues, here is what is
happening according to him.

Hi,

Yesterday morning I updated my office computer with the latest update
of
windows, after that only I am facing the VPN connection problem
I am getting the termination error code as 631, i tried to find on
internet and it says "631 -- The port was disconnected by the user." I
am
not disconnecting my VPN. It may be any of the process which is
disconnecting it. Do you have any idea which process may disconnect it
or
is there any other reason ?

Log Name: Application
Source: RasClient
Date: 11/02/2010 8:05:31 AM
Event ID: 20226
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: Office-PC
Description:
CoId={5DB2765B-78C8-4F39-937B-B6759C245811}: The user Office-PC\Rob
dialed a connection named VPN Connection which has terminated. The
reason code returned on termination is 631.
Event Xml:

I had him trace the RAS logs during the time he was connected and
dropped and I found this in his PPP log

[4492] 02-11 08:30:25:400:
[4492] 02-11 08:30:25:400: InsertInTimerQ called
portid=6,Id=25,Protocol=80fd,EventType=0,fAuth=0
[4492] 02-11 08:30:26:400: Recv timeout event received for
portid=6,Id=24,Protocol=8057,fAuth=0
[4492] 02-11 08:30:26:400: PPP packet sent at 02/11/2010 16:30:26:400
[4492] 02-11 08:30:26:400: Protocol = IPv6CP, Type = Configure-Req,
Length = 0x10, Id = 0x1a, Port = 2
[4492] 08:30:26:400: 80 57 01 1A 00 0E 01 0A 80 64 E2 2D C8 E8 F4 E8
|.W.......d.-....|
[4492] 02-11 08:30:26:400:
[4492] 02-11 08:30:26:400: InsertInTimerQ called
portid=6,Id=26,Protocol=8057,EventType=0,fAuth=0
[4492] 02-11 08:30:29:400: Recv timeout event received for
portid=6,Id=25,Protocol=80fd,fAuth=0
[4492] 02-11 08:30:29:400: Request retry exceeded
[4492] 02-11 08:30:29:400: FsmThisLayerFinished called for protocol =
80fd, port = 2
[4492] 02-11 08:30:30:400: Recv timeout event received for
portid=6,Id=26,Protocol=8057,fAuth=0
[4492] 02-11 08:30:30:400: Request retry exceeded
[4492] 02-11 08:30:30:400: FsmThisLayerFinished called for protocol =
8057, port = 2
[4492] 02-11 08:30:30:400: RemoveFromTimerQ called
portid=6,Id=0,Protocol=0,EventType=3,fAuth=0
[4492] 02-11 08:30:30:400: NotifyCaller(hPort=2, dwMsgId=4)
[4492] 02-11 08:30:30:400: NotifyCaller(hPort=2, dwMsgId=0)
[4492] 02-11 08:30:30:410: Inserting autodisconnect in timer q for
port=2, sec=-1
[4492] 02-11 08:30:30:410: RemoveFromTimerQ called
portid=6,Id=0,Protocol=0,EventType=1,fAuth=0
[4492] 02-11 08:30:30:410: InsertInTimerQ called
portid=6,Id=0,Protocol=0,EventType=1,fAuth=0
[5124] 02-11 08:33:08:799: PppStop

[5124] 02-11 08:33:08:799: PPPEMSG_Stop recvd

NOTE: This is the only person who is experiencing this!

These are the things I have tried...

I have setup a brand new completely different VPN server, which still
drops his connection after 2-3 mins. Again his logs shows the
disconnect initiated from him, and my server log also reflects the
same.

Changed the MTU and MRU server side to 1280

Client side had him created new vpn connections, unchecked ipv6
options as well as DNS and changed, flipped, smacked, and put back
just about every setting with the same disconnects. No firewall,
antiviris turned off, windows defender off etc.....

Only thing I can think of now is a call into Microsoft (but that's
like pulling all your good teeth out and leaving the one bad one in)

Again any help would be great, cheers,

Eric


P.S. Also had the user roll back with the same result??? What's going
on??? remember this happens with 3 different VPN servers all on
different hardware 1. Sonicwall 2. Windows Server 2003 3. Linux
Openswan