IPSec and loss of communications.....

This is quite an intresting problem which occurs when you install a vanilla copy of the operating system (mainly Windows Server 2003 or above) and have communcation issues with anything other than localhost and the the local computer name.
This means your server cannot obtain a DHCP address from a remote server and if you assign a static IP address then you cannot ping any remote devices on the network, so if you ping localhost you will get this response:
Pinging 127.0.0.1 with 32 bytes of data:
Reply from 127.0.0.1: bytes=32 time<1ms TTL=64
Reply from 127.0.0.1: bytes=32 time<1ms TTL=64
Reply from 127.0.0.1: bytes=32 time<1ms TTL=64
Reply from 127.0.0.1: bytes=32 time<1ms TTL=64
If you ping the local server IP or name you will get this response:
Pinging ipsecsrv [192.168.0.55] with 32 bytes of data:
Reply from 192.168.0.55: bytes=32 time<1ms TTL=64
Reply from 192.168.0.55: bytes=32 time<1ms TTL=64
Reply from 192.168.0.55: bytes=32 time<1ms TTL=64
Reply from 192.168.0.55: bytes=32 time<1ms TTL=64
However if you try to ping a remote server you get the response:
Pinging remote [192.168.0.56] with 32 bytes of data:
Destination host unreachable
Destination host unreachable
Destination host unreachable
Destination host unreachable
NOTE : I had this issue after installing Citrix MPS4 as Citrix utilises the IPSec service for security purposes, which leads me on to anotther point if you do not have a need for IPsec then set the service is Disabled and Stopped to prevent future communcation issues!
If you navigate your way to the Service manager (services.msc) you will notice that the IPSec Service is stopped and cannot be started with the error "The IPSEC Services service terminated with the following error: The system cannot find the file specified", also in the same arena if you open the local secuity policy you will get the error "The IPSec Policy storage container could not be opened. The following error occurred: The system cannot find the file specified. (80070002)"
You may also get other errors which are shown below for reference:
“Error: 10045 - The attempted operation is not supported for the type of object referenced”
“Event ID: 4292 – The IPSec driver has entered Block mode. IPSec will discard all inbound and outbound TCP/IP network traffic that is not permitted by boot-time IPSec Policy exemptions”.
“Event ID: 7023 - The IPSEC Services service terminated with the following error: The system cannot find the file specified”.
"Could not start the IPSEC Services service on Local Computer. Error 2: The system cannot find the file specified."
"The IPSec Policy storage container could not be opened. The following error occurred: The system cannot find the file specified. (80070002)".
To fix this error follow the instructions below:
1. Click Start, click Run, type regedit, and then click OK.
2. In Registry Editor, locate and then click the following subkey:
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsIPsecPolicyLocal.
NOTE : If the key HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsIPsec contains no data then proceed to Step 6
3. On the Edit menu, click Delete.
4. Click Yes to confirm that you want to delete the subkey
5. Quit Registry Editor
6. Click Start, click Run, type regsvr32 polstore.dll, and then click OK.
7. Start the IPSec Service
8. Communcations have been restored
Previous Post Next Post

☕️ Buy me a coffee ?

If any of these articles have helped you out consider buying me a coffee, completely optional, but would be appreciated!

نموذج الاتصال