Error with call to IpHlpApi.DLL: GetBestInterface failed, error 1231

[marcebil]

I am using a windows 7 virtual machine 64 bits.

I got this error when trying to connect vpnclient. It was working still recently , and now is giving this error

I tried solutions like copy a iphlpapi.dll from another place where it is running ok, reinstall vpnclient, run antiviruses to clean vm, Nothing works.
I saw some help from this discussion group from year 2007. I tried that too with no success. 

Thanks in advance for any help or orientation

This below is what is in the log:

Cisco Systems VPN Client Version 5.0.07.0290
Copyright (C) 1998-2010 Cisco Systems, Inc. All Rights Reserved.
Client Type(s): Windows, WinNT
Running on: 6.1.7601 Service Pack 1
Config file directory: C:\Program Files (x86)\Cisco Systems\VPN Client\

1 11:01:12.751 08/10/22 Sev=Warning/2 CVPND/0xA3400015
Error with call to IpHlpApi.DLL: GetBestInterface failed, error 1231

2 11:01:12.751 08/10/22 Sev=Warning/2 IKE/0xE300009A
Failed to set up connection data

3 11:01:41.206 08/10/22 Sev=Warning/2 CVPND/0xA3400015
Error with call to IpHlpApi.DLL: GetBestInterface failed, error 1231

4 11:01:41.206 08/10/22 Sev=Warning/2 IKE/0xE300009A
Failed to set up connection data

[JP Miranda Z]

Hi marcebil,

This is definitely a hard one since not much people uses a product that is already end of life and end of support since 2014, the behavior you are describing and the error normally happens for this 2 reasons:

1- The OS did some changes on the Virtual Adapter that are affecting the VPN Client, in this case you probably already followed this recommendations:

Enable Virtual Adaptor before connecting -or- Disable the ICS (Internet Connection Sharing) service in Vista --> ***as you can see this is from Windows Vista and there is a bug for this behavior CSCsv31383***

2- A 3rd party software could be also interfering with the VPN client not allowing the VA to come up, this could be caused for an AV/AM/FW....

Considering you are asking for options to get this working with the legacy VPN client im not sure if this help but i would like to give you some suggestions:

1- Configure AnyConnect with ssl or ikev2

ASA SSL:

https://www.cisco.com/c/en/us/support/docs/security/anyconnect-secure-mobility-client/119006-configure-anyconnect-00.html

ASA IKEv2:

https://www.cisco.com/c/en/us/support/docs/security/anyconnect-secure-mobility-client/113692-technote-anyconnect-00.html

 Router SSLVPN:

https://www.cisco.com/c/en/us/support/docs/security/anyconnect-secure-mobility-client/200533-AnyConnect-Configure-Basic-SSLVPN-for-I.html

Router FlexVPN:

https://www.cisco.com/c/en/us/support/docs/security/flexvpn/200555-FlexVPN-AnyConnect-IKEv2-Remote-Access.html

*** this options will requires licenses considering the amount of users that will use the service and even to download the anyconnect client from cisco.com***

2- Another option without a license will be using the Windows Native ikev2 client:

ASA:

https://www.cisco.com/c/en/us/support/docs/security/adaptive-security-appliance-asa-software/213246-asa-ikev2-ra-vpn-with-windows-7-or-andro.html

Router:

https://www.cisco.com/c/en/us/support/docs/security/flexvpn/115907-config-flexvpn-wcca-00.html

Hope this helps!

-JP-