Windows Server RAS VPN - Cannot Connect

Question

My VPN will not connect outside my company LAN.

I'm Running Windows Server 2019 latest patches to this date.

=RAS VPN Setup=

Notes:

1. Firewall rule for incoming RAS connections has been created.
2. Checked the Firewall for the correct ports for IPSec and all required are open
3. Network policy for RAS clients is set to enable as well.

=Client Configuration=

3. Added Registry key for Nat translation.
4. Disabled Firewall
5. Using Mobile Network Hotspot to simulate out of office WAN environment.
6. Test Client is domain Joined
7. Account has Access granted for Dial In
8. Created new VPN connection
9. Set to IPsec with presaged key
10. Using the Public IP of my organization for the VPN conection.

=vpn interface settings=

Security tab
Type of VPN: layer 2 tunneling protocol with L2TP/IPSec
Data Encryption: Chap, MSCHAP v2

Network Tab
IPV4: DNS is set to the IP Address of the VPN Server

Thoughts?

Answer 1

Hello @Travis

At first sight everything looks normal with the settings, so I would recommend a more thorough analysis of the connection logs in order to discovery the failure. Please enable RAS tracing to generate the required logs:

From an elevated command prompt:
run the command >netsh ras set tracing * enabled
Now reproduce de issue.
To flush the RAS logs by the command> netsh ras set tracing * disabled
Check the logs at %windir%tracing directory (for example path C:\windwos\tracing) .
Some of the useful files are:
PPP.log
RASMAN.log
IASHLPR.log
RASAPI32.log
RASIPCP.log

Also the RRASEtwTracing.etl file, which you will need to convert to txt using the command> netsh trace convert input=RRASEtwTracing.etl out=<output filename>.txt

Hope this helps discovering more details about your issue,
Best regards,