Windows 10 VPN Error 809: Connecting When the Remote Server Is Not Responding

You set up a VPN connection using Windows’ own VPN settings, select Connect, and receive error 809: the network connection between your computer and the VPN server could not be established because the remote server is not responding. The Windows 10 VPN error 809 message often appears on slot online home networks and hotel Wi-Fi, even when the server is working.

This error is most common with L2TP/IPsec VPNs. That protocol uses specific network ports, and many home routers and public networks block or alter the traffic.

A special case occurs when the VPN server or your PC sits behind a router using network address translation, which is true of almost every home network. Windows does not allow that arrangement for L2TP by default.

A registry setting and a few router checks usually solve it.

What Might Be Causing It

Error 809 appears for these reasons:

• The router or network blocks UDP ports 500 and 4500 used by IPsec.
• Windows refuses L2TP/IPsec connections where the server is behind a NAT router.
• A firewall or security suite blocks the VPN traffic.
• The VPN server address, pre-shared key, or protocol type is incorrect.

Testing on a different network, such as a phone hotspot, quickly shows whether the original network is blocking the connection.

First Steps to Try

Check the basics.

1. Confirm the server address, VPN type, and pre-shared key under Settings > Network & Internet > VPN > Advanced options.
2. Try connecting through a phone hotspot.
3. Temporarily disable third-party firewalls or security suites.
4. Restart the router and the PC.
5. In the router settings, enable IPsec or L2TP passthrough if offered.

If the VPN connects on the hotspot, the home router is blocking or mishandling VPN traffic.

If the Problem Continues

Allow NAT traversal in Windows.

1. Open Registry Editor and export a backup.
2. Go to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PolicyAgent.
3. Create a DWORD (32-bit) value named AssumeUDPEncapsulationContextOnSendRule.
4. Set its value to 2.
5. Restart the PC and connect again.

This setting is documented by Microsoft for L2TP/IPsec servers behind NAT. If your VPN provider offers other protocols, such as IKEv2, SSTP, or its own app, those often avoid error 809 entirely.

Protect Your Data First

Back up the registry before editing, and add only the value described. On work devices, ask IT before changing VPN or registry settings. Re-enable firewalls after testing.

The Bottom Line

VPN error 809 usually means VPN traffic is blocked or NAT is preventing L2TP/IPsec. Check router passthrough settings, test another network, and add the NAT traversal registry value if needed.

If you manage the VPN server yourself, check that its firewall allows the required ports and that it supports NAT traversal.