How do I configure preshared keys on Windows 2000 Pro SP3

[Karan]

Hi all,

I'm trying to configure a Windows 2000 SP3 Pro box to use my combined
ISA/RRAS box. I've configured RRAS to use a preshared key as I want to
avoid deploying certificates at this time. This works well so far with Win
XP, but I have to support some 2000 Pro users that haven't been upgraded yet
to XP.

When I try and install my pre-configured on Win2K connectoid I get an error
"This service profile installs an L2TP/IPSec connection that requires a
pre-shared key. Your current system configuration does not support
pre-shared keys. If you choose to continue, this connection might not
function properly. Do you want to continue?"

I have tried installing the update in MSKB 818043, but that hasn't helped.
Am I missing another update that will allow pre-shared keys? Is this even
possible on Windows 2000 Pro?

Thanks in advance for you help,
Karan Mavai

 

[Steven Umbach [MVP]]

It is not recommended or supported by Microsoft. They do have a
procedure for using preshared keys for l2tp vpn endpoints, you may find some
of that informnation useful. See KB link for more details. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;EN-US;240262

 

[Karan]

Thanks Steve ... I ran into that article late last night after changing my
search terms a little to not include the entire error message. Now to test
and see if it works.
They say it's not supported in 2000, but they've added it to XP and 2K3. I
can understand the security reasons for not using such a scheme, but the
administrative overhead of managing and using certificates for me is too
much right now. I'm going to deploy them soon, but I need to do some
testing with a simpler mechanism and this is it.

Cheers,
Karan Mavai