Cisco VPN Client: Reason 414 connection failure
Cisco VPN Client 4.0.5 would not connect from a Windows XP SP2 machine I was troubleshooting. The latest Windows security updates were installed. A GPO enabled Windows Firewall and blocked traffic whenever the machine was away from the Active Directory domain.
The VPN connection used TCP tunneling on port 10000. I changed it to UDP but got the same result. I searched online and found this Microsoft KB article:
Update to permit the Cisco VPN Client program to work in TCP transport mode in Windows XP SP2
After you install a pre-release version of Windows XP SP2, if you configure Cisco VPN Client version 4.0.3.D to use Internet Protocol security (IPSec) over TCP, you receive the following error message when you try to connect to a Cisco VPN concentrator:
Secure VPN Connection terminated locally by the Client. Reason 414: Failed to establish a TCP connection.
This problem occurs because the TCP/IP protocol is changed to drop any packets that are directed to the loopback IP address, but that arrive on an interface other than the loopback interface. Because the Cisco VPN client sends packets to the loopback IP address, but the packet comes from a physical interface, the packets are dropped.
I checked the Windows Firewall configuration and confirmed that it was enabled.
I stopped Windows Firewall with:
| |
I tried connecting again, and the connection to my office network worked. After reading the KB article and stopping the firewall, I realized we had forgotten to add the Cisco VPN Client exception to the Active Directory GPO.
Reference
2 comments
Comments from the original WordPress site, kept read-only.
i have 412 error
Simply wish to say your article is as astonishing. The clarity in your post is simply
excellent and i can assume you're an expert on this subject. Fine with your permission allow me to grab your feed to keep up to date with forthcoming post. Thanks a million and please carry on the rewarding work.