| Event Id | 20111 |
| Source | RemoteAccess |
| Description | A Demand Dial connection to the remote interface <interface name> on port VPNx-y was successfully initiated but failed to complete successfully because of the following error: The L2TP connection attempt failed because security negotiation timed out. |
| Event Information | When you attempt to manually establish a Layer 2 Tunneling Protocol (L2TP)/IP Security Protocol (IPSec) connection with a Windows 2000-based server by using the Routing and Remote Access snap-in, you may be unable to do so, and the initiator computer may display the following error message: Routing and Remote Access An error occurred during connection of the interface. The L2TP connection attempt failed because security negotiation timed out. In addition,Event ID 20111 will be logged in the System event log of the initiator computer. CAUSE : This issue can occur because of one of the following reasons: The certificate on the virtual private networking (VPN) server is not a valid machine certificate or is missing. If the VPN server got a certificate during the Certificate Authority installation, this certificate is not valid for IPSec machine authentication. The IPSec Policy Agent service is stopped and started without stopping and starting the Routing and Remote Access service on the remote computer. The IPSec Policy Agent service is not running when you start the Routing and Remote Access service. RESOLUTION: To resolve this issue, do one of the following: Install a valid machine certificate on the VPN server. Stop and start the IPSec Policy Agent service, and then stop and start the Routing and Remote Access service on the remote computer. To do so, use one of the following methods. Method 1: 1. Click Start, point to Programs, point to Administrative Tools, and then click Computer Management. 2. Double-click Services and Applications, double-click Services, double-click IPSEC Policy Agent, click Stop, click Start, and then click OK. 3. Double-click Routing and Remote Access, click Stop, click Start, and then click OK. Method 2: At a |
| Reference Links | Event ID 20111, Error 792 or Error 781 When Establishing an L2TP/IPSec Connection |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.