Share via

Event ID 20229 — VPN NAP Enforcement Client Configuration

  • Article

Applies To: Windows Server 2008 R2

A Network Access Protection (NAP) enforcement client is responsible for requesting access to a network, communicating a client computer's health status to the NAP server that is authorizing the network access, and communicating the connection status of the client computer to other components of the NAP client architecture. A NAP-capable client is a computer that has the NAP components installed and can verify its health state by sending a statement of health (SoH) to NPS.

The remote access enforcement client enforces health policies when a client computer attempts to gain access to the network through a virtual private network (VPN) connection.

Event Details

Product: Windows Operating System
ID: 20229
Source: RasMan
Version: 6.1
Symbolic Name: ROUTERLOG_RASQEC_MISMATCH_COID
Message: The remote access connection with the correlation ID <RRAS-CoID> received an unexpected/mismatched response to its Statement of Health (SoH) from the server. The NAP correlation ID for this transaction is <NAP-CoID>.

Resolve

Fix problems with NAP configuration

ROUTERLOG_RASQEC_MISMATCH_COID

The response sent by a remote access server to the client computer upon receiving a SoH after client remediation has a correlation ID (CoID) that does not match the correlation ID of the RAS connection. The following are some of the possible causes of the problem:

  • Problems in the network between the client and server might be causing a delay or loss in traffic, leading to a mismatch in responses. For example, the response sent by the server might be for an earlier SoH sent by the client.
  • Problems with the NAP Agent. Check the Windows event log for errors related to NAP Agent.

For network problems, contact the ISP or network administrator to determine the status of the network.

Verify

To verify that the remote access server can accept connections, establish a remote access connection from a client computer.

To create a VPN connection:

  1. Click Start, and then click Control Panel.
  2. Click Network and Internet, click Network and Sharing Center, and then click Set up a connection or network.
  3. Click Connect to a workplace, and then click Next.
  4. Complete the steps in the Connect to a Workplace wizard.

To connect to a remote access server:

  1. In Network and Sharing Center, click Manage network connections.
  2. Double-click the VPN connection, and then click Connect.
  3. Verify that the connection was established successfully.

VPN NAP Enforcement Client Configuration

Routing and Remote Access Service Infrastructure