troubleshooting Question
remote anywhere vpn troubleshooting 2012 R2 Server Essentials
Line One asked on
Hi,
I have a Server 2012 R2 Essentials server that has remote anywhere vpn setup but after a SSL cert renewal, the VPN portion is no longer working. I am not sure if the renewal has anything to do with it but it was the most recent thing done.
Users can connect to the VPN but after connecting, they cannot reach the server. I cannot ping the server either and the users do not have Internet after connecting to the VPN. They are using the remote gateway, DHCP and DNS is from DHCP as well.
key pieces is missing from the network config, users do not have a gateway ip after connecting to the vpn.
Are there any "Advanced" settings on the server or is the Wizard the only place to configure this?
Thanks,
EDIT:
- added routing table from server, client before connecting to vpn and client after connecting to vpn
client before conntecing to vpn:
==========================
Interface List
10...08 00 27 03 40 7e ......Intel(R) PRO/1000 MT Desktop Adapter
1.........................
11...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface
15...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #2
13...00 00 00 00 00 00 00 e0 Microsoft 6to4 Adapter
==========================
IPv4 Route Table
==========================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.168.122.1 192.168.122.62 10
127.0.0.0 255.0.0.0 On-link 127.0.0.1 306
127.0.0.1 255.255.255.255 On-link 127.0.0.1 306
127.255.255.255 255.255.255.255 On-link 127.0.0.1 306
192.168.122.0 255.255.255.0 On-link 192.168.122.62 266
192.168.122.62 255.255.255.255 On-link 192.168.122.62 266
192.168.122.255 255.255.255.255 On-link 192.168.122.62 266
224.0.0.0 240.0.0.0 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link 192.168.122.62 266
255.255.255.255 255.255.255.255 On-link 127.0.0.1 306
255.255.255.255 255.255.255.255 On-link 192.168.122.62 266
==========================
Persistent Routes:
None
After connecting to vpn:
==========================
Interface List
23........................
10...08 00 27 03 40 7e ......Intel(R) PRO/1000 MT Desktop Adapter
1.........................
11...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface
15...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #2
13...00 00 00 00 00 00 00 e0 Microsoft 6to4 Adapter
16...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #3
==========================
IPv4 Route Table
==========================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.168.122.1 192.168.122.62 4235
0.0.0.0 0.0.0.0 On-link 192.168.1.119 11
127.0.0.0 255.0.0.0 On-link 127.0.0.1 4531
127.0.0.1 255.255.255.255 On-link 127.0.0.1 4531
127.255.255.255 255.255.255.255 On-link 127.0.0.1 4531
184.69.147.42 255.255.255.255 192.168.122.1 192.168.122.62 4236
192.168.1.119 255.255.255.255 On-link 192.168.1.119 266
192.168.122.0 255.255.255.0 On-link 192.168.122.62 4491
192.168.122.62 255.255.255.255 On-link 192.168.122.62 4491
192.168.122.255 255.255.255.255 On-link 192.168.122.62 4491
224.0.0.0 240.0.0.0 On-link 127.0.0.1 4531
224.0.0.0 240.0.0.0 On-link 192.168.122.62 4492
224.0.0.0 240.0.0.0 On-link 192.168.1.119 11
255.255.255.255 255.255.255.255 On-link 127.0.0.1 4531
255.255.255.255 255.255.255.255 On-link 192.168.122.62 4491
255.255.255.255 255.255.255.255 On-link 192.168.1.119 266
==========================
Persistent Routes:
None
Server:
==========================
Interface List
26........................
13...0c c4 7a c8 b3 c9 ......Intel(R) I210 Gigabit Network Connection #2
1.........................
16...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface
14...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #2
15...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #3
==========================
IPv4 Route Table
==========================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.168.1.254 192.168.1.3 266
127.0.0.0 255.0.0.0 On-link 127.0.0.1 306
127.0.0.1 255.255.255.255 On-link 127.0.0.1 306
127.255.255.255 255.255.255.255 On-link 127.0.0.1 306
169.254.0.0 255.255.0.0 On-link 192.168.1.125 306
169.254.0.26 255.255.255.255 On-link 192.168.1.125 306
169.254.255.255 255.255.255.255 On-link 192.168.1.125 306
192.168.1.0 255.255.255.0 On-link 192.168.1.3 266
192.168.1.3 255.255.255.255 On-link 192.168.1.3 266
192.168.1.125 255.255.255.255 On-link 192.168.1.125 306
192.168.1.255 255.255.255.255 On-link 192.168.1.3 266
224.0.0.0 240.0.0.0 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link 192.168.1.3 266
224.0.0.0 240.0.0.0 On-link 192.168.1.125 306
255.255.255.255 255.255.255.255 On-link 127.0.0.1 306
255.255.255.255 255.255.255.255 On-link 192.168.1.3 266
255.255.255.255 255.255.255.255 On-link 192.168.1.125 306
==========================
Persistent Routes:
Network Address Netmask Gateway Address Metric
0.0.0.0 0.0.0.0 192.168.1.254 Default
==========================
I have a Server 2012 R2 Essentials server that has remote anywhere vpn setup but after a SSL cert renewal, the VPN portion is no longer working. I am not sure if the renewal has anything to do with it but it was the most recent thing done.
Users can connect to the VPN but after connecting, they cannot reach the server. I cannot ping the server either and the users do not have Internet after connecting to the VPN. They are using the remote gateway, DHCP and DNS is from DHCP as well.
key pieces is missing from the network config, users do not have a gateway ip after connecting to the vpn.
Are there any "Advanced" settings on the server or is the Wizard the only place to configure this?
Thanks,
EDIT:
- added routing table from server, client before connecting to vpn and client after connecting to vpn
client before conntecing to vpn:
==========================
Interface List
10...08 00 27 03 40 7e ......Intel(R) PRO/1000 MT Desktop Adapter
1.........................
11...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface
15...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #2
13...00 00 00 00 00 00 00 e0 Microsoft 6to4 Adapter
==========================
IPv4 Route Table
==========================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.168.122.1 192.168.122.62 10
127.0.0.0 255.0.0.0 On-link 127.0.0.1 306
127.0.0.1 255.255.255.255 On-link 127.0.0.1 306
127.255.255.255 255.255.255.255 On-link 127.0.0.1 306
192.168.122.0 255.255.255.0 On-link 192.168.122.62 266
192.168.122.62 255.255.255.255 On-link 192.168.122.62 266
192.168.122.255 255.255.255.255 On-link 192.168.122.62 266
224.0.0.0 240.0.0.0 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link 192.168.122.62 266
255.255.255.255 255.255.255.255 On-link 127.0.0.1 306
255.255.255.255 255.255.255.255 On-link 192.168.122.62 266
==========================
Persistent Routes:
None
After connecting to vpn:
==========================
Interface List
23........................
10...08 00 27 03 40 7e ......Intel(R) PRO/1000 MT Desktop Adapter
1.........................
11...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface
15...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #2
13...00 00 00 00 00 00 00 e0 Microsoft 6to4 Adapter
16...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #3
==========================
IPv4 Route Table
==========================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.168.122.1 192.168.122.62 4235
0.0.0.0 0.0.0.0 On-link 192.168.1.119 11
127.0.0.0 255.0.0.0 On-link 127.0.0.1 4531
127.0.0.1 255.255.255.255 On-link 127.0.0.1 4531
127.255.255.255 255.255.255.255 On-link 127.0.0.1 4531
184.69.147.42 255.255.255.255 192.168.122.1 192.168.122.62 4236
192.168.1.119 255.255.255.255 On-link 192.168.1.119 266
192.168.122.0 255.255.255.0 On-link 192.168.122.62 4491
192.168.122.62 255.255.255.255 On-link 192.168.122.62 4491
192.168.122.255 255.255.255.255 On-link 192.168.122.62 4491
224.0.0.0 240.0.0.0 On-link 127.0.0.1 4531
224.0.0.0 240.0.0.0 On-link 192.168.122.62 4492
224.0.0.0 240.0.0.0 On-link 192.168.1.119 11
255.255.255.255 255.255.255.255 On-link 127.0.0.1 4531
255.255.255.255 255.255.255.255 On-link 192.168.122.62 4491
255.255.255.255 255.255.255.255 On-link 192.168.1.119 266
==========================
Persistent Routes:
None
Server:
==========================
Interface List
26........................
13...0c c4 7a c8 b3 c9 ......Intel(R) I210 Gigabit Network Connection #2
1.........................
16...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface
14...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #2
15...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #3
==========================
IPv4 Route Table
==========================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.168.1.254 192.168.1.3 266
127.0.0.0 255.0.0.0 On-link 127.0.0.1 306
127.0.0.1 255.255.255.255 On-link 127.0.0.1 306
127.255.255.255 255.255.255.255 On-link 127.0.0.1 306
169.254.0.0 255.255.0.0 On-link 192.168.1.125 306
169.254.0.26 255.255.255.255 On-link 192.168.1.125 306
169.254.255.255 255.255.255.255 On-link 192.168.1.125 306
192.168.1.0 255.255.255.0 On-link 192.168.1.3 266
192.168.1.3 255.255.255.255 On-link 192.168.1.3 266
192.168.1.125 255.255.255.255 On-link 192.168.1.125 306
192.168.1.255 255.255.255.255 On-link 192.168.1.3 266
224.0.0.0 240.0.0.0 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link 192.168.1.3 266
224.0.0.0 240.0.0.0 On-link 192.168.1.125 306
255.255.255.255 255.255.255.255 On-link 127.0.0.1 306
255.255.255.255 255.255.255.255 On-link 192.168.1.3 266
255.255.255.255 255.255.255.255 On-link 192.168.1.125 306
==========================
Persistent Routes:
Network Address Netmask Gateway Address Metric
0.0.0.0 0.0.0.0 192.168.1.254 Default
==========================
Learn from the best
Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.
Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 1 Answer and 4 Comments.
Try for 7 days”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.
Our community of experts have been thoroughly vetted for their expertise and industry experience.