netscreen 5xp, windows 2000 and error 789

Archived from groups: comp.dcom.vpn (More info?)

Well I tried making a new policy on our firewall...
I first added a rule to allow pptp and forward it to my desktop machine.
( i can connect to my desktop from other computer on our lan...) That
didn't work, so I thought I'd experiment and setup ping to forward to my
machine... And I can't ping my ip from the outside... I then set it to
allow any source, and to forward all packets to my machine, and nothing
at all works... I made sure the cheesy windows firewall isn't running
either... What gives... Is this normal?

matt

Matt Misener wrote:

> Hi,
>
> I'm trying to setup a vpn, with a windows 2000 client connecting to
> windows 2000 server behind a netscreen 5xp firewall.
>
> However, I'm recieving error 789: "The L2TP connection attempt failed
> because the security layer encourntered a processing error during
> initial negotiations with the remote computer."
>
> I searched this group (via google) and found several instances of this
> error but no one ever posted a reply... If you need more details,
> please let me know. I've never tried to setup a vpn before but am
> fairly knowledgable about most things. If you can help that would be
> awesome!!
>
> Thanks,
>
> Matt Misener