Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am receiving event 789 when connecting to my Forefront TMG VPN server from windows 7 clients via L2TP. This does not occur on XP systems. I've run through the debugging at without success.

I'm receiving error 4976 server side with the following message. "During main mode negotiation, IPsec received an invalid negotiation packet." How can I resolve this?

share|improve this question
up vote 0 down vote accepted

After investigation it appears that the issue is that RRAS is responding on the default IP address assigned to the external NIC (.100) versus the IP which the VPN is created on (.101). Attempting connection to .100 appears to have fixed the issue. Placing .101 as the default IP address on the NIC would also likely resolve the issue.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.