Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have setup a SSTP VPN connect and it is assigning the local IP address to the client, e.g. The server has two NICs, private and public. The private is on a 10.180.x.x IP address and the public has the public IP address.

When I connect via. the client the Internet access on my local PC stops working. I would like the Internet access to go through the VPN. I am not able to ping the IP nor tracert or nslookup a domain. The tracert looks something like:

1 242ms   *   242ms     VPNHOSTNAME (
2 *       *   *         Request Timed Out
3 *       *   *         Request Timed Out

On the server I setup the RRAS as VPN + NAT. Any idea where I have gone wrong? Thank you.

I have looked through the similar issue at ServerFault - PPTP VPN - users cannot access Internet via the server however it doesn't seem to help me with a solution when the tracert and ping fails.

Update #1: Also, on the RRAS setup I don't have the DHCP Relay setup, would that affect my setup? I don't have a DHCP server setup, I just have the RRAS allocating IP addresses within the range to

Update #2: From the local machine I am able to ping the address that the Remote Access Server acquired to use on the server adapter. I can also ping the private NIC on the VPN server (e.g. 10.180.x.x) but I can't ping say Google's Public DNS

Update #3: Also I notice that when connected to the VPN there is no NAT mappings showing under the IPv4. Shouldn't these be showing for the VPN client to be able to access the Internet?

Update #4: Okay, I reconfigured the whole RRAS again, after doing that several times. When using PPTP with MS-CHAP v2 authentication the NAT seems to work fine and I can access the Internet. It seems the problem is with SSTP. I have setup a NAT forwarding rule on the public interface to forward HTTPS port 443 to the RRAS server adapter (as per Microsoft Technet instructions / documentation) and that allows the SSTP to connect, however it will disconnect after say 30-40 seconds. Even during the 30 seconds I am connected to the SSTP VPN, I cannot access the Internet. Any ideas?

share|improve this question

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.