Networknet archive Blog

Cisco VPN Client: Reason 414 connection failure

Originally published Last updated 3 comments

I recently troubleshot a Cisco VPN Client issue on a Windows XP SP2 machine with version 4.0.5 and the latest Windows security updates. After installing and configuring the VPN client, I had problems connecting. A GPO enabled Windows Firewall and blocked traffic when the machine was not connected to the Active Directory domain.

Image Description

VPN Client: Secure VPN Connection terminated locally by the Client. Reason 414: Failed to establish a TCP connection.

The VPN connection used TCP tunneling on port 10000. I changed it to UDP but got the same result. I searched online and found this Microsoft KB article:

Update to permit the Cisco VPN Client program to work in TCP transport mode in Windows XP SP2

After you install a pre-release version of Windows XP SP2, if you configure Cisco VPN Client version 4.0.3.D to use Internet Protocol security (IPSec) over TCP, you receive the following error message when you try to connect to a Cisco VPN concentrator:

Secure VPN Connection terminated locally by the Client. Reason 414: Failed to establish a TCP connection.

This problem occurs because the TCP/IP protocol is changed to drop any packets that are directed to the loopback IP address, but that arrive on an interface other than the loopback interface. Because the Cisco VPN client sends packets to the loopback IP address, but the packet comes from a physical interface, the packets are dropped.

I checked the Windows Firewall configuration and confirmed that it was enabled.

image image

I stopped Windows Firewall with:

Code1 line
1

cmd /k sc stop sharedaccess

I tried connecting again, and the connection to my office network worked. After reading the KB article and stopping the firewall, I realized we had forgotten to add the Cisco VPN Client exception to the Active Directory GPO.

Reference

2 comments

Comments from the original WordPress site, kept read-only.

  2. komikku.fr

    Simply wish to say your article is as astonishing. The clarity in your post is simply
    excellent and i can assume you're an expert on this subject. Fine with your permission allow me to grab your feed to keep up to date with forthcoming post. Thanks a million and please carry on the rewarding work.

1 mention