8
votes
Accepted
How to setup L2TP IPsec VPN server on Windows Server 2008 R2?
1. Check L2TP ports existence
First check whether there are actually L2TP port configured in Routing and Remote Access (RRAS).
Click Start, click Administrative Tools, and then click Routing and ...
- 954
4
votes
IPv6 Not Routing Properly
Yes System 256 2001:470:xxxx:yyyy::/64 13 Internet
Yes Manual 256 2001:470:xxxx:yyyy::/64 21 RAS (Dial In) Interface
Your Internet subnet and RAS subnet need to be different ...
- 39k
4
votes
Accepted
Connected to Windows Server 2016 VPN on AWS but could not ping resources in VPC
Finally found the correct steps on how to create a VPN on Windows Server 2016 in AWS. Once connected, the client is able to access resources within the VPC and still access the Internet. Here's the ...
3
votes
IKEv2 VPN, tunnel ok but no traffic
In general, this article is pretty similar to your problem.
Strongswan (IKEv2) connection established, but no traffic routing
I guess this might help you also.
$ iptables -t nat -A POSTROUTING -o ...
- 6,151
3
votes
IPv6 with IPv4 over RRAS SSTP VPN from Client that only has IPv4 access
I thought I'd provide a more generic Linux router scenario for users not using pfSense but a Linux based router (in my case DD-WRT).
ip -6 route add xxxx:xxx:xxxx:xxxx::/64 via xxxx:xxx:xxxx:xx::x ...
- 674
3
votes
Accepted
Windows 10 vpn change the dns settings
Known bug
The do-nothing properties button on the ipv4 protocol is a ubiquitous problem in Windows 10. The problem has been widely reported long ago (before Windows 10 was even released) so do not ...
- 146
3
votes
Windows 2016 Server RAS/VPN
You can use Network Policy Server (NPS). It's a feature of Windows, you can add it to any Windows Server, Network Policy and Access Services (NPAS) feature. You can then add policies to connected ...
- 1,575
2
votes
Accepted
RRAS SSTP VPN IPv6 traffic is not able to be routed through server
I managed to resolve this. It turns out someone else had a similar question:
IPv6 with IPv4 over RRAS SSTP VPN from Client that only has IPv4 access
Turns out its because the client doesn't have a ...
- 674
2
votes
pptp on Ubuntu server can't ping other machines on the LAN
I had success adding a route after connection, where 192.168.10.0 is the machine I'm trying to connect to, and 255.255.255.0 is the submask of the network:
route add -net 192.168.10.0 netmask 255.255....
- 121
2
votes
Accepted
RRAS 2012R2 NAT with isolated subnets
I've found the solution for this in case you still need it:
Right Click on every Interface in the RRAS Console in the General section.
Select properties and click on incoming filter
click new and add ...
- 76
2
votes
Windows 8.1 Dial-up
Whilst @EEAA's point about Windows 8 not being a server is entirely valid there are some bits of hackery that may help?
First of all I am assuming that you are concerned with ensuring that the RRAS ...
- 1,260
2
votes
Windows Server 2012 SSTP stops listening to port 443, how do I resume listening without a server restart?
Your's is the most comprehensive question so I will provide my input here.
From my testing in Windows Server 2012 R2, I can restore this functionality without rebooting by doing the following:
...
- 21
2
votes
Accepted
windows server 2016 DC + VPN Roles - DNS Issue
The DNS server will register the ip address for each interface that it is bound to. The fix is to "unbind" the 192.168.18.1 interface in the DNS server properties.
From the DNS management console, ...
- 109k
2
votes
Windows RRAS VPN failing to set options on Mac L2TP clients due to DHCP relay discarding packets
As it turns out, the defaults for the DHCP relay agent simply don't work for some L2TP clients.
When you set up an interface for DHCP relaying in RRAS (on the "Internal" interface, where VPN ...
- 114k
2
votes
RRAS on WIndows Server 2019 with DHCP
Can you try the work around to change below registry key value and restart DHCP Client service?
Path:
Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Dhcp
Key name: RequiredPrivileges
...
- 21
2
votes
RRAS on WIndows Server 2019 with DHCP
I tried the registry fix and it worked for me.
reg add "HKLM\SYSTEM\CurrentControlSet\Services\Dhcp" /v RequiredPrivileges /d "SeChangeNotifyPrivilege"\0"SeCreateGlobalPrivilege"\0"...
- 21
2
votes
Accepted
Can I give DirectAccess clients IPv4 addresses instead of or along with IPv6?
Unfortunately, no. DirectAccess is IPv6-only. You deploy IPv6 on your internal network, but that's not exactly trivial. :) Another option would be to leverage an IPv6 transition technology like ISATAP....
- 136
1
vote
windows server 2016 DC + VPN Roles - DNS Issue
Server 2016 introduced DNS policies, with DNS policies you can dictate which IP Address is resolved for a request. So for your network you can use them to make sure that when the clients query for the ...
- 3,254
1
vote
Accepted
DNS resolution of machines connected from VPN
Are your Client machines registering DNS records through the DNS server specified in the VPN DHCP scope?
If SRV-DC1 is a global catalog, I would check the AD-integrated zone to see if VPN'd CLI ...
- 351
1
vote
Windows 2016 RRAS installation initialization hangs
I came across this while having a similar issue on Nutanix using their Acopolis HV (AHV).
There is no way that I could find to use an emulated Intel driver, so this fix didn't work for me, but it did ...
1
vote
Use Azure Public IP With On Prem VM
i want to assign a Azure Public IP to an on prem vm to expose some
services. But forward the traffic from the Public IP to the OnPrem VM
over the existing site to site connection
For now, we can'...
- 2,399
1
vote
Setting up RRAS (SSTP) with public SSL certificate and public/private name mismatch (WS2012R2)
This solution should do what you want Windows Server 2012 SSTP VPN
However, you have to edit the registry on the client to prevent revocation check on the certificate.
However, I've setup to two SSTP ...
- 164
1
vote
VPN issue - Routing and remote Access - Win 2012 R2
Finally, got this fixed.. Here are the steps if someone faces the same issue.
→ Add two network cards on the machine. Keep one static with public IP addresses. And Add few local IP addresses on ...
- 121
1
vote
Accepted
RRAS NAT not forwarding for specific Hyper-V VM's
So, as it turns out the issue is due to checksum offloading.
For some reason, Linux guests don't work over NAT when IPv4 Checksum Offloading is activated. (They work without NAT just fine, which is ...
- 1,153
1
vote
Accepted
Remove Remote Access Role from WS2012 R2
Lets break your question down:
Yes, you can safely remove the remote access role from the server without losing the functionality of DNS and AD, that will make the dial in interface go away too.
...
- 3,859
1
vote
Accepted
Is RRAS SSTP VPN using publicly signed certificate a bad idea?
You need a CA for client authentication. You must trust only client certificates signed by your CA.
If you do not plan to use client certificates for authentication, then you do not need a private CA....
- 17k
1
vote
Windows 10 vpn change the dns settings
Resolving servername and servername.companydomain.local involve two different mechanisms for name resolution.
Resolving servername.companydomain.local is easy assuming that DNS is configured ...
- 109k
1
vote
Can't access on premises machines over Azure VPN
The reason is that packets are properly routed to the on premises machines, but those same machines do not know where to send their answers back to Azure clients.
Correct, yes. But that does not mean ...
1
vote
Windows VPN server can talk to VPN clients, but won't send packets from its local network to the VPN clients
What if you add a static route on your servers telling them that in order to reach 10.128.0.0/20 they have to go through the VPN's server LAN address?
route add 10.128.0.0 mask 255.255.240.0 a.b.c.d
...
- 476
1
vote
IPv6 with IPv4 over RRAS SSTP VPN from Client that only has IPv4 access
Turns out it was a little thing and it took looking at the problem in a completely different way to figure it out.
The problem wasn't with RRAS it was with my router software setup (in this case ...
- 321
Only top scored, non community-wiki answers of a minimum length are eligible