No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

AR Router Troubleshooting Guide

This Product Documentation provides guidance for maintaining AR Enterprise Router, covering common information collection and fault diagnostic commands, typical fault troubleshooting guide, and troubleshooting.
Rate and give feedback :
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
An AR Router with an L2TP VPN Configured Through the Web Establishes a Connection with a PC Running Windows 8 but the Built-in VPN Client of the PC Fails to Dial Up and Reports Error 691

An AR Router with an L2TP VPN Configured Through the Web Establishes a Connection with a PC Running Windows 8 but the Built-in VPN Client of the PC Fails to Dial Up and Reports Error 691

This section provides a troubleshooting case for the fault that an AR router with an L2TP VPN configured using the web platform establishes a connection with a PC running Windows 8 but the built-in VPN client of the PC fails to dial up and reports error 691.

Networking

Figure 25-17  Networking diagram in which a traveling employee initiates an L2TP tunnel connection to the enterprise headquarters

The configuration on the web platform is as follows:

  1. Configure IP addresses for interfaces.

  2. Configure a user name and the password.

  3. Configure static routes.

  4. Configure an L2TP server.

Fault Description

After the configuration is complete, a traveling employee uses the built-in VPN client of the PC running Windows 8 to dial up. However, the dialup fails, and the client reports error 691.

Fault Analysis

  1. Check whether the user name and password entered on the PC are correct.
  2. Use the same method to configure a different user name and a different password on the web platform to verify that the fault is not caused by an incorrect user name or password.
  3. Check the user authentication mode on the PC and AR router. On the PC, choose Start > Control Panel > Network and Internet > Network and Sharing Center > Change Adapter Setting. Right-click the created VPN connection and choose Properties from the shortcut menu. Click the Security tab. Verify that CHAP is selected for data encryption, as shown in Figure 2.
    Figure 25-18  PC configuration
    Access the web platform of the AR router. Choose VPN > L2TP VPN > L2TP Server, and click . The Modify L2TP Server page is displayed. Verify that CHAP is selected for Authentication mode, as shown in Figure 3. The authentication mode on both the PC and AR router needs to be CHAP.
    Figure 25-19  AR configuration
  4. Check whether the access level of the created user is Common user. Choose User Management > User Management, and click . The Modify User page is displayed. On the page, change the access level of the user created for the AR router to Common user. The fault is rectified.

Procedure

  1. Choose User Management > User Management, and click . The Modify User page is displayed.

  2. Change the user access level to Common user.

Conclusions and Suggestions

For the common administrator and enterprise administrator configured on the User Management page of the web platform, the encryption algorithm is set to irreversible-cipher, indicating that the user password is encrypted using the irreversible encryption algorithm. For the super administrator and common users, the encryption algorithm is set to cipher, indicating that the user password is encrypted using the reversible encryption algorithm. On an AR router, if a user is allowed to encrypt the local user password using the irreversible encryption algorithm, the AR router does not support CHAP authentication for the user. When configuring a user on the User Management page, you are advised to select Common user for the access level of the L2TP account.

Translation
Download
Updated: 2019-05-10

Document ID: EDOC1000079719

Views: 447025

Downloads: 4303

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next