> Source: [sk105099](https://support.checkpoint.com/results/sk/sk105099)

# sk105099 - "failed to connect: Internal error- (CCC_E_GENERAL)" error on Remote Access VPN client when trying to connect to cluster member

| Property | Value |
|----------|-------|
| Solution ID | sk105099 |
| Date Created | 2015-03-07 |
| Last Modified | 2020-09-03 |
| Technical Level | Advanced |
| Products | Licensing |
| Versions | Not Version-Specific |

## Symptoms

- * "`failed to connect: Internal error- (CCC_E_GENERAL)`" error on Remote Access VPN client when trying to connect to cluster member.

* VPN connection to another cluster member works correctly.

* Remote Access VPN client (e.g., Endpoint Connect) log shows:

  ```
  
  ... ... ...
  D Date Time ...: ccc_server_rc_to_error: GW returned an unknown code = 699
  E Date Time ...: auth failed
  E Date Time ...: auth: ccc_auth_step failed: Internal error - [CCC_E_GENERAL] (1)
  E Date Time ...: auth: set error: Internal error - [CCC_E_GENERAL]
  E Date Time ...: ccchl_connect: iterate failed
  D Date Time ...: onConnected: called status -1
  ... ... ...
  ```

* Debug of VPND daemon per [sk89940](http://supportcontent.checkpoint.com/solutions?id=sk89940) on the problematic cluster member shows:

  ```
  
  [vpnd PID ...]@HostName[Date Time] asyncCptlsRenegotiation: entering.
  [vpnd PID ...]@HostName[Date Time] get_fwtls_conn_stateid: <...>, is_reneg=1.
  [vpnd PID ...]@HostName[Date Time] asyncCptlsRenegotiation: get_fwtls_conn_stateid failed.
  ... ...
  [vpnd PID ...]@HostName[Date Time] AuthenticationServices::setAuthResponse 'NewSessionRequest', Setting CCC return code to: 99
  ... ...
  [vpnd PID ...]@HostName[Date Time] setResponse: Response Header:
  (CCCserverResponse
    :ResponseHeader (
    :id (1)
    :type (CertAuth)
    :session_id ()
    )
  )
  [vpnd PID ...]@HostName[Date Time] setResponse: Response Header + Data:
  (CCCserverResponse
    :ResponseHeader (
      :id (1)
      :type (CertAuth)
      :session_id ()
    )
    :ResponseData ()
   )
  [vpnd PID ...]@HostName[Date Time] setResponse: Setting return code to: 99
  [vpnd PID ...]@HostName[Date Time] setReturnCode: Re/setting response return code... (600 + 99 = 699)
  [vpnd PID ...]@HostName[Date Time] setReturnCode: Re/setting response return code... (600 + 99 = 699)
  [vpnd PID ...]@HostName[Date Time] CPRAS_Dispatcher_CallService_Wrapper: Service 'CertAuth' succeeded
  [vpnd PID ...]@HostName[Date Time] CccMain::CCCRequest: exited
  ```

* */var/log/messages* file on the problematic cluster member shows:

  `;Global param: operation failed: Unknown parameter (param name vpnk_multik_enable_forwarding)`
* Output of *fw ctl get int vpnk_multik_enable_forwarding* command on both cluster members shows:

  `vpnk_multik_enable_forwarding = 1`
* Output of *fw ctl chain* command on both cluster members shows different number of chains - on the problematic cluster member, all VPN chains are missing (`vpn multik forward, vpn decrypt, l2tp, vpn tagging, vpn policy, vpn nat, vpn encrypt`).

* Output of *dmesg* command (and */var/log/dmesg* file) on the problematic cluster member shows these messages multiple times:

  * FW-1: Warning: No valid license
  * VPN-1: ERROR: No license for encryption, disabling encryption features

## Cause

Central Evaluation license is installed on the problematic cluster member. This license is not parsed properly.

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content