Access Keys:
Skip to content (Access Key - 0)

Q: VPN client was unable to setup IP filtering

  • When trying to connect to MIT's VPN from my windows computer, the computer cannot connect.
  • When connection fails, there is an error box:

    The VPN client was unable to setup IP filtering. A VPN connection will not be established.

Context

  • Using Cisco AnyConnect VPN software
  • Running Windows

In the Event Viewer (eventvwr.msc), the "Cisco AnyConnect VPN Client", there are log entries like:

Function: CChangeRouteHelper::AddRouteChange
File: .\ChangeRouteHelper.cpp
Line: 1295
Invoked Function: AddRouteChange
Return Code: -33095667 (0xFE07000D)
Description: ROUTETABLE_ERROR_CREATEIPFORWARDENTRY_FAILED

Answer

  • One situation that may cause this is if a Windows component named "Base Filter Engine" (BFE) is not working properly.
  • The following Cisco support forum thread has pointers for how to fix the BFE service and registry https://supportforums.cisco.com/thread/2120739

Community

Documentation and information provided by the MIT Community


Last Modified:

May 16, 2012

Get Help

Request help
from the Help Desk
Report a security incident
to the Security Team
Labels:
c-vpn c-vpn Delete
vpn vpn Delete
client client Delete
was was Delete
unable unable Delete
to to Delete
setup setup Delete
ip ip Delete
filtering filtering Delete
connection connection Delete
will will Delete
not not Delete
be be Delete
established established Delete
windows windows Delete
cisco cisco Delete
anyconnect anyconnect Delete
any any Delete
connect connect Delete
Enter labels to add to this page:
Please wait 
Looking for a label? Just start typing.
Feedback
This product/service is:
Easy to use
Average
Difficult to use

This article is:
Helpful
Inaccurate
Obsolete
Adaptavist Theme Builder (4.2.3) Powered by Atlassian Confluence 3.5.13, the Enterprise Wiki