4
votes
Accepted
Connected to Windows Server 2016 VPN on AWS but could not ping resources in VPC
Finally found the correct steps on how to create a VPN on Windows Server 2016 in AWS. Once connected, the client is able to access resources within the VPC and still access the Internet. Here's the ...
3
votes
Windows 2016 Server RAS/VPN
You can use Network Policy Server (NPS). It's a feature of Windows, you can add it to any Windows Server, Network Policy and Access Services (NPAS) feature. You can then add policies to connected ...
3
votes
IKEv2 VPN, tunnel ok but no traffic
In general, this article is pretty similar to your problem.
Strongswan (IKEv2) connection established, but no traffic routing
I guess this might help you also.
$ iptables -t nat -A POSTROUTING -o ...
2
votes
Windows Server 2012 SSTP stops listening to port 443, how do I resume listening without a server restart?
Your's is the most comprehensive question so I will provide my input here.
From my testing in Windows Server 2012 R2, I can restore this functionality without rebooting by doing the following:
...
2
votes
RRAS on WIndows Server 2019 with DHCP
I tried the registry fix and it worked for me.
reg add "HKLM\SYSTEM\CurrentControlSet\Services\Dhcp" /v RequiredPrivileges /d "SeChangeNotifyPrivilege"\0"SeCreateGlobalPrivilege"\0"...
2
votes
RRAS on WIndows Server 2019 with DHCP
Can you try the work around to change below registry key value and restart DHCP Client service?
Path:
Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Dhcp
Key name: RequiredPrivileges
...
2
votes
Accepted
Additional interfaces in Routing and Remote Access
The closest I have found to a solution is the below.
Open RegEdit.exe. Go to
"HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces"
where each of your network adaptors (physical or ...
2
votes
Windows RRAS VPN failing to set options on Mac L2TP clients due to DHCP relay discarding packets
As it turns out, the defaults for the DHCP relay agent simply don't work for some L2TP clients.
When you set up an interface for DHCP relaying in RRAS (on the "Internal" interface, where VPN ...
2
votes
Accepted
Can I give DirectAccess clients IPv4 addresses instead of or along with IPv6?
Unfortunately, no. DirectAccess is IPv6-only. You deploy IPv6 on your internal network, but that's not exactly trivial. :) Another option would be to leverage an IPv6 transition technology like ISATAP....
2
votes
Accepted
windows server 2016 DC + VPN Roles - DNS Issue
The DNS server will register the ip address for each interface that it is bound to. The fix is to "unbind" the 192.168.18.1 interface in the DNS server properties.
From the DNS management console, ...
1
vote
Accepted
RRAS VPN using Wrong Server Authentication Cert
It'd be really helpful to know what your RRAS config actually is, what OS, anything.
Anyway, if Get-VpnAuthProtocol shows TunnelAuthProtocolsAdvertised = "Certificate", then you can use Set-...
1
vote
Can I use always on VPN device tunnel on Windows 10 Pro
Currently supported and recommended solution is to use Enterprise edition to have Device Tunnel with fallback to User Tunnel.
As I know it is possible to configure Device Tunnel for Profesional ...
1
vote
Accepted
Can I use always on VPN device tunnel on Windows 10 Pro
As per my question posted here and answer provided: https://docs.microsoft.com/en-us/answers/questions/432512/is-it-possible-to-use-always-on-vpn-device-tunnel.html
This is currently only supported on ...
1
vote
Accepted
RRAS SSTP VPN and DNS Resolution with multiple suffix
There's no functionality in the Windows SSTP client to specify any kind of scope of authority with a DNS server. You just get to tell the client what DNS server to use.
Were I in this situation I'd ...
1
vote
Windows 2016 Server RAS/VPN
Regarding your clarification,
we don't want people to reuse their credentials to connect personal
devices to the VPN. We only want trusted / work machines to connect
You could use certificates ...
1
vote
How to register RRAS VPN clients in DNS with DHCP doing secure dynamic updates?
I think I've come up with a reasonable solution for this.
Make sure the laptops have "Register this connection's addresses in DNS" enabled on their VPN connections.
Set a DHCP User Class on all of ...
1
vote
Accepted
Setting up RRAS VPN on separate subnet with AWS
Turns out I just had to disable Source/Destination Check in the EC2 Console.
This can be done by selecting the EC2 Instance, then from the Actions menu, Networking > Change Source/Dest Check
Edit:
...
1
vote
Accepted
Behaviour of authentication when using multiple Radius servers on RRAS
The preference is based on the RADIUS' Score (basically, the server responsiveness and the initial score)
Routing and Remote Access uses a scoring mechanism to decide which
RADIUS server to use. The ...
1
vote
Accepted
Change Network Location from Domain to Public
You cannot change an adapters profile from Domain (DomainAuthenticated) to anything else. This is not good when you are trying to mix networks together. The way I worked around this was to block NLA ...
1
vote
windows server 2016 DC + VPN Roles - DNS Issue
Server 2016 introduced DNS policies, with DNS policies you can dictate which IP Address is resolved for a request. So for your network you can use them to make sure that when the clients query for the ...
1
vote
Accepted
DNS resolution of machines connected from VPN
Are your Client machines registering DNS records through the DNS server specified in the VPN DHCP scope?
If SRV-DC1 is a global catalog, I would check the AD-integrated zone to see if VPN'd CLI ...
1
vote
Windows 2016 RRAS installation initialization hangs
I came across this while having a similar issue on Nutanix using their Acopolis HV (AHV).
There is no way that I could find to use an emulated Intel driver, so this fix didn't work for me, but it did ...
1
vote
Use Azure Public IP With On Prem VM
i want to assign a Azure Public IP to an on prem vm to expose some
services. But forward the traffic from the Public IP to the OnPrem VM
over the existing site to site connection
For now, we can'...
1
vote
Setting up RRAS (SSTP) with public SSL certificate and public/private name mismatch (WS2012R2)
This solution should do what you want Windows Server 2012 SSTP VPN
However, you have to edit the registry on the client to prevent revocation check on the certificate.
However, I've setup to two SSTP ...
1
vote
VPN issue - Routing and remote Access - Win 2012 R2
Finally, got this fixed.. Here are the steps if someone faces the same issue.
→ Add two network cards on the machine. Keep one static with public IP addresses. And Add few local IP addresses on ...
1
vote
Accepted
RRAS NAT not forwarding for specific Hyper-V VM's
So, as it turns out the issue is due to checksum offloading.
For some reason, Linux guests don't work over NAT when IPv4 Checksum Offloading is activated. (They work without NAT just fine, which is ...
1
vote
Accepted
Remove Remote Access Role from WS2012 R2
Lets break your question down:
Yes, you can safely remove the remote access role from the server without losing the functionality of DNS and AD, that will make the dial in interface go away too.
...
1
vote
RRAS 2012R2 NAT with isolated subnets
It is possible to use both NAT and Static Filters together on one RRAS server. even though RRAS Static Filters are stateless and NAT requires stateful firewall.
If you view the NAT Session Mappings (...
1
vote
RRAS won’t start with 8007042a or event ID 7024, aka the “routing remote access unable to load Iprtrmgr.dll”
RRAS on Server 2019 and 7024 or 20269/20153 events from RemoteAccess, after 4405 event from NPS
I changed the LogFile path in NPS -> Accounting.
Afterwards RRAS started.
1
vote
RRAS won’t start with 8007042a or event ID 7024, aka the “routing remote access unable to load Iprtrmgr.dll”
I know this is a hecking old post, but the same unhelpful error comes up even in Server 2016.
Luckily, for me the cause was mismatched certificates between IIS and RRAS.
The fix was to use the ...
Only top scored, non community-wiki answers of a minimum length are eligible
Related Tags
rras × 285vpn × 139
windows-server-2008 × 66
windows-server-2008-r2 × 39
windows-server-2003 × 38
windows × 37
routing × 36
networking × 30
nat × 27
windows-server-2012-r2 × 26
hyper-v × 19
dhcp × 19
pptp × 19
windows-server-2012 × 16
domain-name-system × 13
windows-server-2016 × 10
sstp × 10
l2tp × 9
remote-access × 8
firewall × 7
site-to-site-vpn × 7
nps × 7
amazon-web-services × 5
ipv6 × 5
port-forwarding × 5