Sign in
 
HomeWindows Server 2012Windows Server 2008 R2Windows Server 2003LibraryForums
Windows Server TechCenter >
> 
> 
Error 806

Answered Error 806

  • Friday, July 13, 2012 9:17 PM
     
     
    Sign In to Vote
    0

    Ive been searching for an answer for two days. I recently bought a vpn account. I have two laptops. one has windows 7 home edition and the other has windows 7 starter. The first one (home edition) works without a problem with pptp but the second one gives the 806 error. also there is no firewall or antivirus installed. however i can connect using l2tp

    ive tried many solutions but non of them worked. is there anyone who can help me with this problem?

     

All Replies

  • Saturday, July 14, 2012 2:07 AM
     
     
    Sign In to Vote
    1

    Usually, an Error 806 indicates GRE is being blocked. Usually a firewall or some other protection would be causing it. Also, please note that GER is also referred to as "Protocol ID#47," and please also note that a Protocol ID is not a port#. Some firewall/routers refer to this as "PPTP Passthrough" or "VPN Passthrough."

    For example, here are the VPN error codes - and also note, the codes apply to all operating system versions.

    List of Error Codes that you may receive when you try to make a dial-up connection or a VPN connection in Windows Vista
    http://support.microsoft.com/kb/923944

    .

    Maybe the default Windows Firewall is active?

    Are you connecting simultaneously from inside the same location on both machines to the same VPN server? If you tried disconnecting the Windows Home Edition, and only try the Starter edition computer, does that help? Reason why I ask, is because some routers/firewalls can only handle one GRE session. It depends on the firewall/router your ISP provided or you've purchased.

    .

    Ace Fekay
    MVP, MCT, MCITP EA, MCTS Windows 2008/R2, Exchange 2007 & Exchange 2010, Exchange 2010 EA, MCSE & MCSA 2003/2000, MCSA Messaging 2003
    Microsoft Certified Trainer
    Microsoft MVP - Directory Services
    Complete List of Technical Blogs: http://www.delawarecountycomputerconsulting.com/technicalblogs.php

    This post is provided AS-IS with no warranties or guarantees and confers no rights.

    FaceBook Twitter LinkedIn

     
  • Saturday, July 14, 2012 7:34 AM
     
     
    Sign In to Vote
    0

    Thanks for your kind answer.

    well, they both werent connected to the vpn server simultaneously. however, today, when I came back from work, I turned on the windows starter and it successfully connected. I jumped up and down and got excited, then turned on my home edition laptop. It couldnt connect and gave the same error... I then saw your answer and disconnected the windows starter from the server and still no connection from the home edition.

    another thing is that I have access to the VPS but I really am not familiar with it. Also, the VPN accounts that are used are different. on the other hand, its possible to connect simultaneously like this: one with PPTP, the other with L2TP. I didnt understand this part where you said: " because some routers/firewalls can only handle one GRE session. It depends on the firewall/router your ISP provided or you've purchased"

    did you mean that i have to change my ISP? or I can be fixed with the settings of the VPS?

    Thanks for your time and help

     
  • Saturday, July 14, 2012 9:17 AM
     
     
    Sign In to Vote
    1

    Hello, 

    Can  you please check below info once and act accordingly. 

     Error Code: 806

    Error Description:  806: The VPN connection between your computer and the VPN server could not be completed. The most common cause for this failure is that at least one Internet device (for example, a firewall or a router) between your computer and the VPN server is not configured to allow Generic Routing Encapsulation (GRE) protocol packets. If the problem persists, contact your network administrator or Internet Service Provider.

    Possible Cause: PPTP uses GRE (Generic Route Encapsulation) protocol to encapsulate the VPN payload in a secure manner.This error generally comes when some firewall in path between client and server blocks GRE Protocol (i.e. IP protocol number 47).

    Possible Solution: Allow both outgoing and incoming Protocol 47 (GRE) on any in between firewalls. If that is not possible, deploy SSTP based VPN tunnel on both VPN server and VPN client – that allows VPN connection across firewalls, web proxies and NAT.

    Regards, Ravikumar P


     
  • Saturday, July 14, 2012 2:54 PM
     
     
    Sign In to Vote
    1

    fmesh65,

    No, you don't have to change your ISP. I'm talking about the firewall/router they gave you or the one you purchased. It may not be able to support simultaneous GRE sessions. What brand/model# is your firewall/router?

    Ace Fekay
    MVP, MCT, MCITP EA, MCTS Windows 2008/R2, Exchange 2007 & Exchange 2010, Exchange 2010 EA, MCSE & MCSA 2003/2000, MCSA Messaging 2003
    Microsoft Certified Trainer
    Microsoft MVP - Directory Services
    Complete List of Technical Blogs: http://www.delawarecountycomputerconsulting.com/technicalblogs.php

    This post is provided AS-IS with no warranties or guarantees and confers no rights.

    FaceBook Twitter LinkedIn

     
  • Saturday, July 14, 2012 3:18 PM
     
     
    Sign In to Vote
    0
    Well, to tell the truth, I didnt understand this, it above my knowledge...
     
  • Saturday, July 14, 2012 3:21 PM
     
     
    Sign In to Vote
    0

    well, Im using a Planet wireless routing device model WRT-403 ...

     
  • Saturday, July 14, 2012 4:13 PM
     
     Answered
    Sign In to Vote
    1

    well, Im using a Planet wireless routing device model WRT-403 ...

    I found the user manual, but I could not find a "VPN Passthrough" setting.
    http://www.planet.com.tw/en/product/images/4200/EM-WRT414_v1.1[1].pdf

    .

    If you have another router, such as a Cisco Linksys router, I recommend testing it. If it works with the Cisco/Linksys router, then you know the problem is due to the Plantet.

    .

    Otherwise if you do not have a Cisco/Linksys router to test it, and since the device is produced by Planet, I recommend contacting Planet support:
    http://www.planet.com.tw/en/support/download.php?mt=0

    .

    Ace Fekay
    MVP, MCT, MCITP EA, MCTS Windows 2008/R2, Exchange 2007 & Exchange 2010, Exchange 2010 EA, MCSE & MCSA 2003/2000, MCSA Messaging 2003
    Microsoft Certified Trainer
    Microsoft MVP - Directory Services
    Complete List of Technical Blogs: http://www.delawarecountycomputerconsulting.com/technicalblogs.php

    This post is provided AS-IS with no warranties or guarantees and confers no rights.

    FaceBook Twitter LinkedIn

     
  • Saturday, July 14, 2012 5:32 PM
     
     
    Sign In to Vote
    0

    Thanks a lot for your help. since I dont have another router, Ill contact them to see if they can help.

     
  • Friday, July 20, 2012 2:33 PM
     
     Answered
    Sign In to Vote
    0

    So, here's the deal...

    When I logged into the router, I found an option about PPTP. It allowed me to fill in the VPN information. I filled them in and now, every computer that connects to the router, connects through the VPN...

    I know technically this didn't solve the problem but I needed to connect to the VPN and this way, it's done....

    Thanks for everyone's help

    • Proposed As Answer by Ace Fekay [MCT]MVP Friday, July 20, 2012 5:27 PM
    • Marked As Answer by fmesh65 Friday, July 20, 2012 6:46 PM
    •  
     
  • Friday, July 20, 2012 5:26 PM
     
     
    Sign In to Vote
    1

    That router is similar to the Netgear ProSecure. The only option with it is to use its SSL capabilities, but it was cumbersome for my one customer that had it and wanted to go back to the easier Windows VPN solution. When I tried that, I found the ProSecure would only let in one PPTP user at a time. NetGear support flatly told me it doesn't support multiple, concurrent VPN passthrough, unfortunately. Our channel partner allowed us to return it in exchange for a Cisco ASA 5500 firewall, which fully supports it, no problems since.

    You may want to think about replacing it with a Cisco ASA. They are a little more money, but they are very robust with their enterprise class features. YOu can probably get one for a lot less money at one of the auction sites, such as eBay.

    At least you have a workaround that works for the time being!

    Cheers!

    Ace Fekay
    MVP, MCT, MCITP EA, MCTS Windows 2008/R2, Exchange 2007 & Exchange 2010, Exchange 2010 EA, MCSE & MCSA 2003/2000, MCSA Messaging 2003
    Microsoft Certified Trainer
    Microsoft MVP - Directory Services
    Complete List of Technical Blogs: http://www.delawarecountycomputerconsulting.com/technicalblogs.php

    This post is provided AS-IS with no warranties or guarantees and confers no rights.

    FaceBook Twitter LinkedIn

     
  • Friday, July 20, 2012 6:52 PM
     
     
    Sign In to Vote
    0

    thanks for your information. It was very useful. at least it made me sure of the real solution. however, since I live in Iran, I dont have access to any credit cards that are used for internet shopping... and they dont ship to Iran...

    I doubt that Cisco ASA exists in the city that Im currently living but Ill look for another brand that supports multiple VPN users...

    thanks to you and to everyone who helped