Microsoft Knowledge Base Article
This article contents is Microsoft Copyrighted material.
©2005-©2007 Microsoft Corporation. All rights reserved.
Terms
of Use |
Trademarks
Article ID: 243374 - Last Review: March 1, 2007 - Revision: 2.2
Enabling VPN in RRAS Causes Connection Issues to Remote Networks
This article was previously published under Q243374
RRAS does not forward packets over the interface that is selected as the "Internet" interface after you enable Virtual Private Network (VPN). Network traffic is forwarded over the VPN connections and the internal LAN connection normally.
When you enable RRAS, the Setup Wizard lets you choose one of the following options:
- Internet connection server
- Remote access server
- Virtual private network (VPN) server
- Network router
- Manually configured server
If you choose one of these options, RRAS is configured just for the functionality each option describes. If you select
VPN server, you configure RRAS to accept incoming VPN connections. This secures the interface you select by implementing filters that only accept PPTP or L2TP traffic. Then, RRAS does not forward packets on that interface unless they are PPTP or L2TP.
If you want your server to be a VPN server and also act as a router, follow these steps:
- In the Setup wizard, click Manually configured server.
- After you enable RRAS, click to select the Enable this computer as a Router check box to manually configure it in RRAS server properties.
- To accept PPTP or L2TP connections, right-click Ports in RRAS Manager, and then click Properties.
- Click WAN Miniport (PPTP), and then click Configure.
- Click to select the Remote access connections (inbound only) check box. Repeat steps 4-5 for WAN Miniport (L2TP).
NOTE: If you choose not to enable any packet filtering on the interface connected to the Internet, you are opening your VPN server to attack from the Internet.
This behavior is by design.
APPLIES TO
- Microsoft Windows 2000 Server
- Microsoft Windows 2000 Advanced Server
- Microsoft Windows 2000 Datacenter Server
Community Feedback System
Very often, it takes hours to solve a problem. Very often, you've looked high
and low, and have tried a lot of solutions. When you finally found it, chances
are, it was because someone else helped you. Here's your chance to give back.
Use our community feedback tool to let others know what worked for you and what
didn't.
Please also understand that the community feedback system is not warranted to be
correct, it's simply a system that we've built to let people try and help each
other. If something in a feedback response doesn't make sense to you, or you're
not comfortable making changes that the feedback talks about (like registry
edits), please consult a professional.
Thank you for using kbAlertz.com Feedback System.
-- Scott Cate
Be the first to leave feedback, to help others about this knowledge base
article.
(Optional) Name
(Optional)
Public URL Or Email
Comments
No
HTML -- Text Only Please