4 votes
Accepted

Connected to Windows Server 2016 VPN on AWS but could not ping resources in VPC

Finally found the correct steps on how to create a VPN on Windows Server 2016 in AWS. Once connected, the client is able to access resources within the VPC and still access the Internet. Here's the ...
Carlo Miguel Cruz's user avatar
3 votes

Windows 2016 Server RAS/VPN

You can use Network Policy Server (NPS). It's a feature of Windows, you can add it to any Windows Server, Network Policy and Access Services (NPAS) feature. You can then add policies to connected ...
Krackout's user avatar
  • 1,575
3 votes

IKEv2 VPN, tunnel ok but no traffic

In general, this article is pretty similar to your problem. Strongswan (IKEv2) connection established, but no traffic routing I guess this might help you also. $ iptables -t nat -A POSTROUTING -o ...
Net Runner's user avatar
  • 6,219
2 votes

Windows Server 2012 SSTP stops listening to port 443, how do I resume listening without a server restart?

Your's is the most comprehensive question so I will provide my input here. From my testing in Windows Server 2012 R2, I can restore this functionality without rebooting by doing the following: ...
GregAndo's user avatar
2 votes

RRAS on WIndows Server 2019 with DHCP

I tried the registry fix and it worked for me. reg add "HKLM\SYSTEM\CurrentControlSet\Services\Dhcp" /v RequiredPrivileges /d "SeChangeNotifyPrivilege"\0"SeCreateGlobalPrivilege"\0"...
BSpicer's user avatar
  • 21
2 votes

RRAS on WIndows Server 2019 with DHCP

Can you try the work around to change below registry key value and restart DHCP Client service? Path: Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Dhcp Key name: RequiredPrivileges ...
Ping Yan's user avatar
2 votes
Accepted

Additional interfaces in Routing and Remote Access

The closest I have found to a solution is the below. Open RegEdit.exe. Go to "HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces" where each of your network adaptors (physical or ...
RickWeb's user avatar
  • 295
2 votes

Windows RRAS VPN failing to set options on Mac L2TP clients due to DHCP relay discarding packets

As it turns out, the defaults for the DHCP relay agent simply don't work for some L2TP clients. When you set up an interface for DHCP relaying in RRAS (on the "Internal" interface, where VPN ...
Shane Madden's user avatar
2 votes
Accepted

Can I give DirectAccess clients IPv4 addresses instead of or along with IPv6?

Unfortunately, no. DirectAccess is IPv6-only. You deploy IPv6 on your internal network, but that's not exactly trivial. :) Another option would be to leverage an IPv6 transition technology like ISATAP....
Richard M. Hicks's user avatar
2 votes
Accepted

windows server 2016 DC + VPN Roles - DNS Issue

The DNS server will register the ip address for each interface that it is bound to. The fix is to "unbind" the 192.168.18.1 interface in the DNS server properties. From the DNS management console, ...
joeqwerty's user avatar
  • 111k
1 vote
Accepted

RRAS VPN using Wrong Server Authentication Cert

It'd be really helpful to know what your RRAS config actually is, what OS, anything. Anyway, if Get-VpnAuthProtocol shows TunnelAuthProtocolsAdvertised = "Certificate", then you can use Set-...
LeeM's user avatar
  • 1,423
1 vote

Can I use always on VPN device tunnel on Windows 10 Pro

Currently supported and recommended solution is to use Enterprise edition to have Device Tunnel with fallback to User Tunnel. As I know it is possible to configure Device Tunnel for Profesional ...
cquresphere's user avatar
1 vote
Accepted

Can I use always on VPN device tunnel on Windows 10 Pro

As per my question posted here and answer provided: https://docs.microsoft.com/en-us/answers/questions/432512/is-it-possible-to-use-always-on-vpn-device-tunnel.html This is currently only supported on ...
James Edmonds's user avatar
1 vote
Accepted

RRAS SSTP VPN and DNS Resolution with multiple suffix

There's no functionality in the Windows SSTP client to specify any kind of scope of authority with a DNS server. You just get to tell the client what DNS server to use. Were I in this situation I'd ...
Evan Anderson's user avatar
1 vote

Windows 2016 Server RAS/VPN

Regarding your clarification, we don't want people to reuse their credentials to connect personal devices to the VPN. We only want trusted / work machines to connect You could use certificates ...
Krackout's user avatar
  • 1,575
1 vote

How to register RRAS VPN clients in DNS with DHCP doing secure dynamic updates?

I think I've come up with a reasonable solution for this. Make sure the laptops have "Register this connection's addresses in DNS" enabled on their VPN connections. Set a DHCP User Class on all of ...
morbiD's user avatar
  • 145
1 vote
Accepted

Setting up RRAS VPN on separate subnet with AWS

Turns out I just had to disable Source/Destination Check in the EC2 Console. This can be done by selecting the EC2 Instance, then from the Actions menu, Networking > Change Source/Dest Check Edit: ...
Campbell's user avatar
  • 143
1 vote
Accepted

Behaviour of authentication when using multiple Radius servers on RRAS

The preference is based on the RADIUS' Score (basically, the server responsiveness and the initial score) Routing and Remote Access uses a scoring mechanism to decide which RADIUS server to use. The ...
Swisstone's user avatar
  • 6,880
1 vote
Accepted

Change Network Location from Domain to Public

You cannot change an adapters profile from Domain (DomainAuthenticated) to anything else. This is not good when you are trying to mix networks together. The way I worked around this was to block NLA ...
Thee Gamefanatic's user avatar
1 vote

windows server 2016 DC + VPN Roles - DNS Issue

Server 2016 introduced DNS policies, with DNS policies you can dictate which IP Address is resolved for a request. So for your network you can use them to make sure that when the clients query for the ...
Michael Brown's user avatar
1 vote
Accepted

DNS resolution of machines connected from VPN

Are your Client machines registering DNS records through the DNS server specified in the VPN DHCP scope? If SRV-DC1 is a global catalog, I would check the AD-integrated zone to see if VPN'd CLI ...
Ulfy's user avatar
  • 349
1 vote

Windows 2016 RRAS installation initialization hangs

I came across this while having a similar issue on Nutanix using their Acopolis HV (AHV). There is no way that I could find to use an emulated Intel driver, so this fix didn't work for me, but it did ...
Vince Phillips's user avatar
1 vote

Use Azure Public IP With On Prem VM

i want to assign a Azure Public IP to an on prem vm to expose some services. But forward the traffic from the Public IP to the OnPrem VM over the existing site to site connection For now, we can'...
Jason Ye's user avatar
  • 2,399
1 vote

Setting up RRAS (SSTP) with public SSL certificate and public/private name mismatch (WS2012R2)

This solution should do what you want Windows Server 2012 SSTP VPN However, you have to edit the registry on the client to prevent revocation check on the certificate. However, I've setup to two SSTP ...
Deaton's user avatar
  • 184
1 vote

VPN issue - Routing and remote Access - Win 2012 R2

Finally, got this fixed.. Here are the steps if someone faces the same issue. → Add two network cards on the machine. Keep one static with public IP addresses. And Add few local IP addresses on ...
Hardik V.'s user avatar
  • 121
1 vote
Accepted

RRAS NAT not forwarding for specific Hyper-V VM's

So, as it turns out the issue is due to checksum offloading. For some reason, Linux guests don't work over NAT when IPv4 Checksum Offloading is activated. (They work without NAT just fine, which is ...
Der Kommissar's user avatar
1 vote
Accepted

Remove Remote Access Role from WS2012 R2

Lets break your question down: Yes, you can safely remove the remote access role from the server without losing the functionality of DNS and AD, that will make the dial in interface go away too. ...
Noor Khaldi's user avatar
  • 3,879
1 vote

RRAS 2012R2 NAT with isolated subnets

It is possible to use both NAT and Static Filters together on one RRAS server. even though RRAS Static Filters are stateless and NAT requires stateful firewall. If you view the NAT Session Mappings (...
goofology's user avatar
  • 392
1 vote

RRAS won’t start with 8007042a or event ID 7024, aka the “routing remote access unable to load Iprtrmgr.dll”

RRAS on Server 2019 and 7024 or 20269/20153 events from RemoteAccess, after 4405 event from NPS I changed the LogFile path in NPS -> Accounting. Afterwards RRAS started.
Tim Haegele's user avatar
1 vote

RRAS won’t start with 8007042a or event ID 7024, aka the “routing remote access unable to load Iprtrmgr.dll”

I know this is a hecking old post, but the same unhelpful error comes up even in Server 2016. Luckily, for me the cause was mismatched certificates between IIS and RRAS. The fix was to use the ...
alt's user avatar
  • 497

Only top scored, non community-wiki answers of a minimum length are eligible