VPN Client gets disconnected automatically

Mahesh Aralelemath 386 Reputation points
2020-08-24T15:49:23.773+00:00

Hi,
We have seen couple of users disconnected automatically from Windows 2016 RRAS-AOVPN Server.
Event id and content observed that
Event id: 20272
The reason for disconnecting was administrative settings or explicit request. The tunnel used was WAN Miniport (IKEv2). The quarantine state was

Kindly suggest if there any way to find out the issue since couldnt find anything from event log.

Is there any limitation on maximum connections?
What is the maximum connections/ports to be configured in WAN Miniport for IKEv2?

Regards
Mahesh

Windows 10
Windows 10
A Microsoft operating system that runs on personal computers and tablets.
11,716 questions
Windows 10 Network
Windows 10 Network
Windows 10: A Microsoft operating system that runs on personal computers and tablets.Network: A group of devices that communicate either wirelessly or via a physical connection.
2,363 questions
Windows Server Infrastructure
Windows Server Infrastructure
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Infrastructure: A Microsoft solution area focused on providing organizations with a cloud solution that supports their real-world needs and meets evolving regulatory requirements.
551 questions
0 comments No comments
{count} votes

Accepted answer
  1. Candy Luo 12,711 Reputation points Microsoft Vendor
    2020-08-25T05:30:31.187+00:00

    Hi Mahesh,

    You can manually change the Maximum ports for IKEV2 connection. The number of available ports should be between 0 and 30000.

    20015-image.png

    Based on the number of your VPN clients' connection, you can change the port number to 250 and then see if the issue is gone.

    In addition, actual limit is network/hardware/performance based. The limiting factors for concurrent VPN connections will be the capacity of the hardware and the number of available IP addresses available to assign to VPN clients.

    Here is a similar thread discussed before, you could have a look:

    https://community.spiceworks.com/topic/2261668-windows-server-remote-acccess-always-on-vpn-max-users

    Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.

    ---Please Accept as answer if the reply is helpful---

    Best Regards,

    Candy


2 additional answers

Sort by: Most helpful
  1. Kapil Arya 8,241 Reputation points MVP
    2020-08-24T16:00:29.157+00:00

    Hello,

    Please run Network Adapter troubleshooter from Settings app > Update & security > Troubleshoot. See if it helps you.

    AFAIK, maximum number of WAN Miniport (IKEv2) ports is 128.

    Regards.


  2. Candy Luo 12,711 Reputation points Microsoft Vendor
    2020-08-25T09:25:12.227+00:00

    Hi Mahesh,

    Did the current user exceed the maximum number of IKEV2 connection? If yes, increase port number and then check the results.

    If not, before we go further, would you please help collect the information below?

    Please check the event log from both client side and VPN server side to see if there are something related for us to troubleshooting.

    The event log on the VPN client usually has an error code. Have you seen such error code? Error code will provide us more thoughts.

    If the error information is limited, it is hard for us to find the cause from Q&A platform level. For such case, we need to trace network monitor to see what is actually occurring on the network when VPN clients disconnected automatically. Unfortunately, analysis of network packets is beyond what we can do in the Q&A platform.

    If the issue is urgent, I would also suggest you contact Microsoft Customer Support and Services where more in-depth investigation can be done so that you would get a more satisfying explanation and solution to this issue.

    You may find phone number for your region accordingly from the link below:

    https://support.microsoft.com/en-us/gp/customer-service-phone-numbers

    Best Regards,

    Candy


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.