Demand dial connection

[Tom]

I have got an VPN Server to VPN server connection setup.
Win2k to Win2k using RRAS. This is not a client
connection but server to server. The connection is up and
has been for sometime but I am getting the following error
in the Event viewer on one of the servers. (Not sure
about the other server as I am not at that location)
"A Demand Dial connection to the remote interface vpn on
port VPN4-127 was successfully initiated but failed to
complete successfully because of the following error: The
account does not have permission to dial in".

I would not worry about it but occasionally the vpn
connection will not reconnect after an interuption and I
will have to manually go in and reset the credentials on
the routing interface. Does anyone have an idea about
what is happening or what I can do to make sure it is
setup entirely correct? Any help will be appreciated.

 

[Srivatsan [MSFT]]

Hi Tom,

This error typically occurs when the user that you configured to dial-out on
the routing interface does not have permissions to dial. The connection may
be up for sometime because the other server may have initiated the demand
dial connection.

Can you please check to see whether the user on this server has the required
permissions?

[Please note that the user name to dial on this routing interface will be
same as the interface name (demand dial interface name) on the other VPN
server]

Here is how you can do this:
(1) Control Panel->Administrative Tools->Computer Management->Local Users
and Groups
(2) Select the user and right click and select 'properties'.
(3) Go to Dial-in tab and make sure that check box for 'Deny Access' is not
checked.
you can select 'Allow Access' here.

Thanks, Srivats.