Select the product you need help with

Error 792: The L2TP Connection Attempt Failed Because Security Negotiation Timed Out

Article ID: 299307 - View products that this article applies to.

This article was previously published under Q299307

SYMPTOMS

When you attempt to establish a Layer 2 Tunneling Protocol (L2TP) connection from a Windows XP-based L2TP client computer to a Windows XP-based Routing and Remote Access Service server, you can receive the following error message:

Error 792: The L2TP connection attempt failed because security negotiation timed out.

Back to the top | Give Feedback

CAUSE

This behavior can occur because you have a preshared key that is configured on the client, but the key is not configured on the Routing and Remote Access Service server. If you set up this type of configuration, you can receive the error message even if valid certificates are configured on both the client and the server.

Back to the top | Give Feedback

RESOLUTION

To work around this behavior, remove the preshared key from the client so that a security negotiation process (by using certificates) can occur:

In Control Panel, double-click Network Connections.
Under the Virtual Private Network section, right-click the L2TP connectoid that you want to modify, and then click Properties.
On the Security tab, click IPSec Settings.
Click to clear the Use pre-shared key for authentication check box, and then click OK.
Click OK again to exit the dialog box of the connectoid.

Back to the top | Give Feedback

STATUS

This behavior is by design.

Back to the top | Give Feedback

MORE INFORMATION

If a preshared key is configured on an L2TP client, the security negotiation process does not attempt to use certificates for authentication, even if a valid certificate exists.

For additional information about other possible causes of error 792, click the article number below to view the article in the Microsoft Knowledge Base:

247231

(http://support.microsoft.com/kb/247231/EN-US/ )

Event ID 20111, Error 792, or Error 781 When Establishing an L2TP/IPSec Connection

For additional information about configuring L2TP and certificates, click the article number below to view the article in the Microsoft Knowledge Base:

253498

(http://support.microsoft.com/kb/253498/EN-US/ )

How to Install a Certificate for Use with IP Security

Back to the top | Give Feedback