RRAS - Two Nic server configuration

Philip Preece 21 Reputation points
2022-07-04T17:35:43.173+00:00

I've been playing with Windows AOVPN and it seems to work well. The setup consists of there virtual servers all running Win2019, all joined to AD and each with a single vnic. The servers are:

-Server1 = DC/CA server
-Server2 = NPS server
-Server3 = RRAS server

To follow best practice, i give the RRAS vm a second vnic and connected this to our dmz. The vm now has the following network configuration:

NIC1 (Name = LAN) - 10.0.0.10/24 (domain.local)
NIC2 (Name = DMZ) - 192.168.100.10/24 (public)

As per the Microsoft KB article i've removed the GW ip from NIC1 and removed non-essential network protocols from NIC2 (ie: file & print sharing, etc). I then updated our corporate firewall to forward the AOVPN traffic to 192.168.100.

Since making these changes i can no longer connect to the AOVPN from any Windows 10 client. So, i then undid these changes (ie: put the RRAS server back to a single nic) and the AOVPN works once again. I attempted the above steps again and the AOVPN stops working! I can ping and resolve both internal and external DNS. I suspect this is a routing issue but i'm struggling to find any event errors or anything useful in the logs.

Any suggestions or advice would be appreciated.

Windows Server Infrastructure
Windows Server Infrastructure
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Infrastructure: A Microsoft solution area focused on providing organizations with a cloud solution that supports their real-world needs and meets evolving regulatory requirements.
562 questions
0 comments No comments
{count} votes

Accepted answer
  1. Anonymous
    2022-07-04T17:58:00.943+00:00

    Maybe something here helps.
    https://directaccess.richardhicks.com/2019/08/19/always-on-vpn-and-rras-with-single-nic/

    --please don't forget to upvote and Accept as answer if the reply is helpful--


1 additional answer

Sort by: Most helpful
  1. Philip Preece 21 Reputation points
    2022-07-05T12:21:13.213+00:00

    Thanks for the advice.
    I've just managed to fix this.
    Seems it was an issue on the edge firewall.


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.