Tech News Today
  • Hardware
    • Motherboards
    • CPUs
    • Graphic Cards
    • RAM
    • SSDs
    • Computer Cases
    • Monitors
    • Peripherals
    • Power Supply Unit
    • PC Builds
    • Computer Tips
  • Software
  • Operating System
    • Windows
    • Mac
    • Linux
  • Gaming
  • Mobile
  • Console
  • More
    • Internet
    • Networking
    • Security
    • Buyer’s Guide
    • Gadgets
    • Laptops
    • Reviews
    • How To
    • News
Facebook Twitter Instagram
Tech News Today
  • Hardware
    • Motherboards
    • CPUs
    • Graphic Cards
    • RAM
    • SSDs
    • Computer Cases
    • Monitors
    • Peripherals
    • Power Supply Unit
    • PC Builds
    • Computer Tips
  • Software
  • Operating System
    • Windows
    • Mac
    • Linux
  • Gaming
  • Mobile
  • Console
  • More
    • Internet
    • Networking
    • Security
    • Buyer’s Guide
    • Gadgets
    • Laptops
    • Reviews
    • How To
    • News
Tech News Today
Home»Networking»Fix: The L2TP Connection Attempt Failed Because the Security Layer Encountered a Processing Error

Fix: The L2TP Connection Attempt Failed Because the Security Layer Encountered a Processing Error

abhinashBy abhinashDecember 21, 2022
l2tp connection attempt failed

Virtual Private Networks or VPNs facilitate the transfer of data over the internet safely without disclosing your IP and location. To do this, it uses some kind of security protocol, and Layer 2 Tunneling Protocol or L2TP is one of them.

But sometimes, the VPN connection may not be successful showing an error “The L2TP Connection Attempt Failed Because the Security Layer Encountered a Processing Error”. In the case of many Windows 10 users, there was a faulty update that prevented the VPN connection over L2TP.

However, apart from this, this error is caused if some specific security configurations within the protocol are not enabled, or a few Windows services are not running. So, enabling these services and tweaking the settings does the trick here.

Table of Contents

  • Switch IP address from public to local
  • Install a Particular Windows Update
    • Uninstalling the Faulty Update
    • Preventing the Update From Installing Automatically
    • Installing the Necessary Update
  • Enable Microsoft CHAP V2 Protocol and LCP Protocol Extensions
  • Restart IPSec Services
  • Check UDP Ports 500 and 4500
  • Set a Registry Key
  • Restart the VPN Connection

Switch IP address from public to local

Before moving to the fixes, you should first try connecting to the network using the Local IP address instead of the public IP. Similarly, you should also make sure that you have used the correct certificate and preshared key to connect. If you have not set any preshared key, then here is the way to do it.

  1. Open the Run dialog box by pressing Windows + ‘R’.
  2. Type ncpa.cpl to open Network Connections.
  3. Right-click on the VPN connection and select Properties.
    vpn connection properties
  4. Go to the Security tab.
  5. Choosing L2TP/IPSec in the Type of VPN, click Advanced Settings.
    Advanced settings for L2TP
  6. Set the Preshared Key and click OK.
    use preshared key

Use this Preshared key to connect to the network and see if the problem is resolved.

Install a Particular Windows Update

Most of the Windows 10 users experienced this error after installing the update KB5009543. As it is a system update, it gets installed automatically, hence the issue.

However, Microsoft released its fix soon in the next update KB5010793. So, you will have to uninstall the earlier update and install the next Windows update which solves the error.

Uninstalling the Faulty Update

  1. Press Windows + ‘I’ to open Settings.
  2. Go to Windows Update>Update History.
    update history
  3. Click on Uninstall updates.
    uninstall updates
  4. Now, find the update KB5009543 and click on Uninstall.

You can also uninstall it using the command prompt.

  1. Open the Run dialog box.
  2. Enter cmd and press Ctrl + Shift + Esc to run Command Prompt as administrator.
  3. Now, type the command wusa /uninstall /kb:5009543 to remove the KB5009543 update.

Preventing the Update From Installing Automatically

Windows will try to download and install the KB5009543 update automatically. And you will again face the issue. So, you should configure the Windows update settings such that it won’t get installed by the system.

  1. Open the Run dialog box.
  2. Type gpedit.msc and hit Enter to open Local Group Policy Editor.
  3. Navigate to Computer Configuration>Administrative Templates>Windows Components>Windows Update>Manage end user experience.
  4. Double-click on Configure Automatic Updates.
    configure automatic updates
  5. Set it to Enabled and choose Notify for download and auto install.
    notify for download and auto install
  6. Click OK to save the settings.

You will be notified before downloading and installing any updates now.

Installing the Necessary Update

Usually, you can find this update is available as optional in Windows. You may have to install it on your own as well.

  1. Go to Windows Update.
  2. Click on Advanced Options and navigate to Optional updates.
    optional updates
  3. If you find the update KB5010793 there, download and install it.
  4. But, if it is not available, then download the update manually from Microsoft Catalogue and install it.
    microsoft-update-catalogue

See if it solves the issue.

Enable Microsoft CHAP V2 Protocol and LCP Protocol Extensions

Most VPN connections use Microsoft CHAP V2 authentication protocol as well as LCP protocol extensions. LCP protocol helps configure and establish the internet connection as well as test the data links in the Point-to-Point protocol.

So, you need to enable these protocols and extensions in your system to solve the issue.

  1. Open Network Connections.
  2. Right-click on the connection having issues and select Properties.
  3. Navigate to the Security tab.
  4. Choose Layer 2 Tunneling Protocol with IPsec (L2TP/IPsec) as the Type of VPN.
  5. Check the Allow these protocols radio.
  6. Select Microsoft CHAP Version 2 (MS-CHAP v2) and click OK.
    Enable Microsoft CHAP Version 2
  7. Similarly, navigate to the Options tab and click on PPP Settings.
  8. Select the Enable LCP Extensions box and click OK.
    Enable LCP Extensions
  9. Save the Settings by clicking OK again.

The problem should be solved after installing these network protocols.

Restart IPSec Services

The IPSec services assist in transferring the data packets safely over the internet in VPN tunneling. Thus, for a VPN connection to work, your system needs to be running these system services. But sometimes, the mentioned error can still appear even when the services are running. In that case, you will have to restart these services.

  1. Open the Run dialog box.
  2. Type services.msc and hit Enter to open the Services window.
  3. Find IPSec Policy Agent.
  4. If it is already running, right-click on it and select Restart. If not, click on Start.
    IPsec Policy Agent
  5. Double-click on the service.
  6. Set the Startup type to Automatic and click OK.
    IPsec startup automatic
  7. Do the same for IKE and AuthIP IPsec Keying Modules.
    IKE and AuthIP IPsec

Try connecting with the VPN connection to see if the error persists still.

Check UDP Ports 500 and 4500

IPSec configuration employs Port 500 and 4500 to facilitate the transfer of data through VPN tunneling. So, if you are trying to establish a VPN connection, then you should allow the traffic to pass through these UDP ports. However, Windows Firewall can sometimes block them, hence the system shows the L2TP Connection Attempt Failed error.

You should enable these ports in Windows Firewall and open them for establishing the connection.

  1. Open the Run dialog box.
  2. Type cmd and hit Enter to run Command Prompt.
  3. Enter the command netstat -ano
    netstat ano
  4. Look if the UDP Ports 500 and 4500 are listed there. If it is not listed, then you will have to open the ports from Windows Firewall.
    no-udp-500-and-4500-ports
  5. Enter firewall.cpl in Run to open Windows Defender Firewall.
  6. Click on Advanced Settings.
    Advanced settings firewall
  7. Go to Inbound Rules and click on New Rule.
    new inbound rule
  8. Choose Port and click Next.
    New port
  9. Select UDP and type 500 on Specific local ports.
    UDP 500 port
  10. Choose Allow the Connection and click Next.
    allow the connection
  11. Select all Domain, Private, and Public options.
    rule apply everywhere
  12. Type 500 on Name and click Finish.
    name port
  13. Check the port on the command prompt again by following step 3.
    UDP 500 and 4500 ports
  14. Do the same for UDP 4500 port if it is still not opened.

You should be able to connect through the VPN after opening the ports.

Set a Registry Key

Some of the Windows servers may not be able to connect to a VPN server that is behind a Network Address Translation (NAT) device. Thus, if you trying to establish a connection to such a VPN, then you will have to set a specific registry key in the client’s computer. This key will allow the security protocols to establish a connection between the server behind the NAT device and the client.

  1. Open the Run dialog box.
  2. Type regedit and hit Enter to open Registry Editor.
  3. Navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PolicyAgent.
  4. Right-click on the blank area, click New, and select the DWORD (32-bit) value.
    New Dword value
  5. Enter the name AssumeUDPEncapsulationContextOnSendRule.
  6. Double-click on the created value and set the Value Data to 2. Here the value 0 means the connection cannot be established, and the value 1 will allow setting the connection to only servers outside NAT but not the client.
    set assume udp encapsulation
  7. Click OK.

Try establishing the VPN connection again.

Restart the VPN Connection

Sometimes the VPN connection can still use the previous configuration even after you change them. And, the error can appear despite trying the above fixes. Thus, you should try restarting the VPN connection by installing the VPN again or setting it up again from the scratch.

  1. Press Windows + ‘X’ and select Device Manager.
  2. Find Network Adapters and expand it.
  3. Right-click on the VPN adapter and select Uninstall Device.
    uninstall network devices
  4. Do this for all VPN connections.
  5. Install or set the new VPN again.
fix
abhinash

I am a mechanical engineer who was awe-struck at first sight of computer. Since then, I have excelled at writing tech-contents regarding every problems and features of windows, software, hardware and anything it incorporates. In addition, I love to study, play FIFA, write poetry and enjoy the gift of life that the mother nature have provided to us.

Related Posts

packet loss test

How To Perform Packet Loss Test On Windows

January 15, 2023
how to reset ethernet adapter

How To Reset Ethernet Adapter

January 2, 2023
does my pc have wifi

Does Your Desktop Have Wi-Fi? Here’s How to Find Out

January 1, 2023
dns server is not responding

8 Ways to Fix “DNS Server Is Not Responding” Error

December 27, 2022
how-to-reset-spectrum-wifi

How to Reset Spectrum Wi-Fi

December 26, 2022
how to update router firmware tp-link

How to Update Router Firmware on TP-Link (2 Possible Ways)

December 26, 2022
Add A Comment

Leave A Reply Cancel Reply

Latest Posts
how long does a cmos battery last

How Long Does a CMOS Battery Last

January 25, 2023
thunderbolt vs usb c

Thunderbolt Vs USB C: What’s the Difference

January 25, 2023
how to find hidden folder in laptop

How to Find Hidden Folder in Laptop

January 24, 2023
You may also like
how-to-connect-headphones-to-tv

5 Ways to Connect Headphones to TV

January 29, 2023
connect-airpods-to-samsung-tv

How to Connect AirPods to Samsung TV? (Step-by-Step Guide)

January 29, 2023
AIO Pump Not Working

AIO Pump Not Working? Here’s How to Fix It

January 29, 2023
Recommended
Cookie Clicker Garden Guide

Cookie Clicker Garden Guide to Unlocking Every Seed

September 26, 2021
monitor no signal

Computer Turns On But Monitor Says No Signal (9 Ways To Fix)

November 10, 2022
Facebook Twitter Pinterest
  • Home
  • About Us
  • Our Team
  • Editorial Guidelines
  • Privacy Policy
  • Affiliate Disclosure
© 2023 TechNewsToday.

Type above and press Enter to search. Press Esc to cancel.