An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
For this Azure Point-to-Site VPN error, the documented causes and checks are:
- If the connection is using IKEv2 on Windows, verify that the Windows version supports IKE fragmentation.
- Windows 10 and Windows Server 2016 support IKEv2, but require the applicable update.
- Operating systems earlier than Windows 10 are not supported for IKEv2 and can only use SSTP.
- On supported Windows versions, install the required update for the OS version:
- Windows Server 2016 / Windows 10 version 1607: KB4057142
- Windows 10 version 1703: KB4057144
- Windows 10 version 1709: KB4089848
- Set the following registry value locally on the client. Warning: registry changes can affect system networking if entered incorrectly.
- Create or set:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RasMan\IKEv2\DisableCertReqPayload - Type:
REG_DWORD - Value:
1
- Create or set:
- If the client shows Error 800 instead, update the NIC driver:
- Open Start → Device Manager
- Expand Network adapters
- Open the NIC properties
- Select Update driver → Search automatically for updated driver software
- Restart the computer and test again
- If the issue is related to VPN reachability between the client and server, verify that UDP ports 500 and 4500 are not blocked by any firewall, NAT device, or router between the client and the VPN server.
- If the VPN tunnel type is set to Automatic, set the VPN client to the specific tunnel type used by the deployment instead of Automatic.
References: