How to troubleshoot VPN error 806 (GRE blocked) in Windows

Updated April 2024: Stop getting error messages and slow down your system with our optimization tool. Get it now at this link

1. Download and install the repair tool here.
2. Let it scan your computer.
3. The tool will then repair your computer.

When working with a VPN in certain circumstances, errors sometimes occur, especially on Windows 10, one of which is called “806 (VPN GRE error blocked)”. If you see the pop-up, the VPN is not working. The full context of the message reads as follows:

“A connection has been established between your computer and the VPN server, but the VPN connection cannot be completed. Error code 806 – The most common reason for this error is that at least one Internet device (such as a firewall or router) between your computer and the VPN server is not configured to allow Generic Routing Encapsulation (GRE) packets. If the problem persists, contact your network administrator or ISP.”

What causes VPN error 806 (GRE Blocked) in Windows?

It turns out that several different reasons can cause this behavior. Below is a list of possible reasons that can cause VPN 806 (GRE Blocked) error:

Outdated router firmware: One of the most common causes that cause this problem is an outdated firmware version that makes the router unable to handle the GRE protocol. To avoid this, simply update your router firmware to the latest version through official channels.

TCP port 1723 is closed: This TCP port is used by most VPN clients to bypass firewall connections. If the reason for the error message is that this port is closed, you can solve the problem by whitelisting it in the firewall settings.

Various firewall issues: If this problem only occurs when the firewall is active, you may want to temporarily disable the third-party package while the VPN is running.

Now that you know all the potential culprits, here’s a short list of methods that other concerned users have successfully used to fix the VPN error.

How to solve VPN error 806 (GRE blocked) in Windows

Open the GRE port for protocol 47

1. Following the steps in the previous solution, create a new inbound rule in the advanced firewall settings.
2. Set the rule type as predefined
3. Set predefined settings for routing and remote access
4. In the Predefined Rules section, select all entries for Routing and Remote Access.
5. In the Action section, select Allow connection and click Finish.
6. Create a new exit rule by following the same steps

Use a reliable VPN service

If you manually set up a VPN connection in Windows 10, you sometimes encounter errors like 806.

To avoid this problem in the long run, we recommend that you choose a commercial and reliable VPN service. This will automatically create a secure tunnel as soon as you connect to the VPN server.

You can even configure your computer to accept incoming VPN connections by requesting port forwarding without having to change your router settings.

Add a firewall exception

1. Go to Firewall and Network Protection
2. Click on Allow application through the firewall
3. Click on Edit Settings (you must have administrator rights)
4. Find your VPN app in this list and check the appropriate boxes for Private and Public.
5. If you can’t find your VPN app here, click Allow another app to find it and add it.

If your firewall didn’t whitelist the VPN when you created the secure tunnel, that might explain why you keep seeing a VPN 806 error on Windows 10.

Open port 1723 via TCP

1. Click the Start button, type Firewall, and select Firewall and Network Protection.
2. Click on Advanced Settings
3. Click Yes when prompted by User Account Control (UAC).
4. Select Inbound Rules.
5. Open the Action menu and select New Rule.
6. Set the rule type Port
7. Under Protocol and Ports, select TCP and set Specific Local Ports to 1723.
8. Set the action to allow the connection
9. Under Profile, select Domain, Private, and Public.
10. Specify a name and click Done.
11. Go to the Outbound Rules section and repeat the following steps

Whitelist the VPN application with your antivirus program

If you don’t have a third-party antivirus program, that means Windows Defender is responsible for your firewall settings.

If you’ve already added an exception for your VPN application through the Windows firewall, you don’t need to perform this step.

Otherwise, run your anti-malware solution and make sure you add your VPN app to the whitelist section. This will prevent your antivirus from blocking the VPN.

Expert Tip: This repair tool scans the repositories and replaces corrupt or missing files if none of these methods have worked. It works well in most cases where the problem is due to system corruption. This tool will also optimize your system to maximize performance. It can be downloaded by Clicking Here

Frequently Asked Questions