2

I've tried configuring basic PPTP VPN at my small business using a number of different tutorials. As far as I can tell, the actual VPN connection worked fine, but upon connecting a client, the Server 'disappears' from the internal LAN. The RRAS service must be stopped before the connection is restored.

My Setup:
The network is simply a DSL Gateway/Router to the outside functioning as NAT/Firewall/DHCP. The server is a Win Server 2008 machine at fixed IP 192.168.1.200. The server has 1 NIC, so I used the 'custom' option when configuring RRAS. The RRAS settings should be default except that I've disabled ports for connection types I'm not using and reduced PPTP ports to 10. I've also created an address pool and disabled DHCP packet forwarding.

The server only functions as a File Share and now a VPN Server. Local LAN computers all have mapped network shares to the server authenticated based on Local User/Group setup on the server.

The Problem:
The moment a client connects through VPN, the server 'disappears' from the local network. All mapped drives disconnect and there is no response to a ping 192.168.1.200. Even if the client disconnects, the server does not re-appear at that address until the RRAS service is stopped.

I've Tried:

  • Using an Address Pool inside and outside the local subnet.
  • Using DCHP Relay
  • Checking Inbound/Outbound filters (none enabled)

The fact that nothing I've tried has had any effect, and that I can connect and successfully obtain an IP tells me that it's something more fundamental I'm missing.

My gut tells me that it's something to do with the second IP address added by the VPN client somehow taking over the interface or traffic from the local LAN accidently getting routed to the VPN client instead of handled at the server once RRAS has become 'active' when a client connects.

Hopefully this may be obvious to someone with real IT experience. I've been doing this a while and almost never been stumped. I'm starting to think it might actually be something tricky since my setup is pretty basic yet refuses to work. I'll be happy to include more info if this doesn't ring any bells right away for anyone.

Thanks

  • what does route print show whilst the client is connected? do all clients cause the issue or just one specific client? – Nath Nov 26 '15 at 7:23
1

I had a similar issue with RRAS in the past. Disabling (not stopping) RRAS and then running "Configure and Enable RRAS" wizard again, choosing "Custom" and then ONLY "VPN Server" solved the problem back then.

Please note that you must choose the "Custom" option in the wizard, as other options assume you have at least 2 NICs (according to How to configure VPN Server with single NIC on Windows Server).

Additionally, make sure the IP addresses you allocate to VPN clients has no conflicts with other LAN clients.

  • Thanks for the reply. Guess I gave up too soon. I disabled and reconfigured using Custom->VPN only like you suggested and my main problem is still there. – sleepisfortheweak Dec 5 '13 at 0:51
  • I can connect to the server and receive IP address, but the server immediately disappears from the network. The server can still ping all clients local and VPN, but no one can ping it. The VPN client can ping local computers as well as be pinged. – sleepisfortheweak Dec 5 '13 at 0:58
0

change the option for the vpn configuration to not use the remote gateway. That is the cause of the connectivity problem. Even if you set your dns server, conenctions are trying to out the remote gateway and thus are not getting to your local network. You can add local routes on your desktop if you prefer using route add at an elevated comamnd prompt. http://pctech.blog.ca/2014/09/10/vpn-connection-disconnects-local-share-connections-and-access-19373426/

  • The requestor is talking about his ptpp server losing local connectivity not the client. your answer and link refer to client side config not the RRAS server – Nath Nov 26 '15 at 7:19

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.