Direct Access Server 2012 R2 Single NIC DNS problem with 8.1 Enterprise

Question

Dear helpers,
I am beginning to rip my hair over the following problem and I am asking for some guidance:
I have setup DA on a server 2012 R2 with the simple wizard using one NIC. I have opened up port 443 to my  DA Server and operations status is showing green on everything. I have used Djoin to join a remote win 8.1 enterprise client to our domain and
setup DA. I can see that my tunnel is established and the client shows up as an IPHTTPS client on my server:
Role                       : client
URL                        : https://vpn.ourdomain.com:443/IPHTTPS
Last Error Code            : 0x0
Interface Status           : IPHTTPS interface active
Connection status on client is stuck in connecting and the eventlog on client gives me following error:
The system failed to register host (A or AAAA) resource records (RRs) for network adapter
with settings:
           Adapter Name : {424F50B4-BF1A-4D96-81FA-7D7436A99F07}
           Host Name : TEST
           Primary Domain Suffix : ourdomain.com
           DNS server list :
                 172.16.8.1
           Sent update to server : <?>
           IP Address(es) :
             172.16.8.110
The reason the system could not register these RRs was because the update request it sent to the DNS server timed out. The most likely cause of this is that the DNS server authoritative for the name it was attempting to register or update is not running at
this time.
I understand why this is failing because it seems like it is contacting the local DNS to register and that's wrong.
Get-DaConnectionStatus gives me the following:
Status    : Error
Substatus : CouldNotContactDirectAccessServer
I can ping the name on the DA server and also the IPv6 address, I can also do nslookup if i set the server used to my internal DNS-servers IPv6 address(DNS and DA server = same machine). My DA Client GPO is being applied to the client and i get an NRPT table
looking as follows:
Settings for DirectAccess-NLS.ourdomain.com
DirectAccess (Certification Authority)  :
DirectAccess (IPsec)                    : disabled
DirectAccess (DNS Servers)              :
DirectAccess (Proxy Settings)           : Use default browser settings
Settings for vpn.ourdomain.com
DirectAccess (Certification Authority)  :
DirectAccess (IPsec)                    : disabled
DirectAccess (DNS Servers)              :
DirectAccess (Proxy Settings)           : Use default browser settings
Settings for .ourdomain.com
DirectAccess (Certification Authority)  :
DirectAccess (IPsec)                    : disabled
DirectAccess (DNS Servers)              : fd1f:6801:cc14:3333::1
DirectAccess (Proxy Settings)           : Bypass proxy
I cannot reach any internal resources by name or IPv4 address except the DA server.
I will gladly provide more info if needed
Please help!
//Cris

Answer 1

Hi,
Thanks for your reply.
Firstly, computer certificates are necessary for DirectAccess.
In addition, it is no need to assign an IPv6 address on all the servers. In Windows server 2012/R2, the
Built-in NAT64 and DNS64 support for accessing IPv4-only resources.
If you select Configure DirectAccess Clients with DNS client suffix search list and add additional suffixes to the list,
you can search for short, unqualified computer names in more than one specified DNS domain.
For more detailed information about DNS suffix search list, please refer to the link below:
Step 2: Configure the DirectAccess Server
Best regards,
Susie