Routing and Remote Access Logs (Windows Server 2008 R2)

Hi,
I have a Windows 2008 R2 server running Routing and Remote access and users are using PPTP VPN's to connect to our network.
I have been asked to find logs for the following for connections in to our server
Username used for connection
Computer Name
IP Address used by computer connecting
Start/End time of VPN session
Date
Encryption used
I found an article stating to enable RRAS logs you need to run the following command
To enable RAS logs run command “netsh ras set tracing * enabled” and found a series of logs created in this location C:\Windows\tracing
None appear to contain the information I am looking for and was wondering if I was doing this correctly and if not how I am meant to extract this information?
If you require any more details just let me know.
Kind Regards
David

Hi,
I can’t sure which article you have read, but fur the 2008R2 the RAS to enable the log and the debug log in the KB is descried like this, I recommend you to try the KB
mentioned method.
To configure RRAS to enable logging
1. Start Server Manager. Click Start, click Administrative Tools, and then click Server Manager.
2. In the navigation tree, expand Roles, and then expand Network Policy and Access Services.
3. Right-click Routing and Remote Access, and then click Properties.
4. On the Logging tab, select Log errors only, Log errors and warnings, or Log all events, depending on how much information you want to capture.
5. Click OK to save your changes.
The related KB:
RRAS: Logging should be enabled on the RRAS server
http://technet.microsoft.com/zh-cn/library/ee922651(v=ws.10).aspx
Hope this helps.
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Similar Messages

Routing and remote access logging to SQL server

Hi!
I am in the process of trying to set up SQL logging from routing and remote access on a windows server 2003 to another windows server 2003 which is running microsoft SQL server 2005.
What i did was i created a database named RRAS in the sql server and in routing and remote access i went under remote access logging and configured it, when i press "test connection" it says its successful. and when i check the local logfile i successfully
configured i can see my connection attempts towards the RRAS. but in the sql database there's nothing, no tables or anything.
I am sure i have the right permissions going on since i have only been using one account for everything so far(created the rras and the sql database), the SQL server is operational(it has a myriad of other databases that are used on a dailybasis).
So i am wondering what component is missing? do i need to create the tables manually, is there a guide that tells me how to do that?

Hi Plindgren,
Thanks for posting here.
May in know which fields we’ve created for this table ?
Please take look the link below and recheck the database settings:
Key concepts for IAS SQL Server logging
http://technet.microsoft.com/en-us/library/cc778830(WS.10).aspx
For more information please also refer to the link below:
Deploying SQL Server Logging with Windows Server 2003 Internet Authentication Service (IAS)
http://technet.microsoft.com/en-us/library/cc776712(WS.10).aspx
Thanks.
Tiger Li
Tiger Li
TechNet Community Support

Would you tell me If window server installed with "routing and remote access" can output firewall logs.

I install "routing and remote access" into Window Server and make it work as a firewall.
When connections are accepted or denied at firewall, would you tell me if the firewall can output the logs ?
If that function can, would you tell me how to configure ?
Thanks.

Hi Kohenro31,
I'm a little confused about configuring RRAS to work as firewall, cause we usually deploy RRAS as VPN connection, router etc, would you please post more information in detail?
Routing and Remote Access Service：
http://technet.microsoft.com/en-us/library/cc754634(v=ws.10).aspx
In addition, to view firewall event logs please check this article:
Viewing Firewall and IPsec Events in Event Viewer:
http://technet.microsoft.com/en-us/library/ff428140(v=WS.10).aspx
To enable RRAS logs, please check this article:
Enabling logs for RRAS:
http://blogs.technet.com/b/rrasblog/archive/2005/12/22/enabling-logs-for-rras.aspx
If I have any misunderstanding, please let me know.
Best Regards,
Anna Wang

Win 7 Pro 64 occasionally fails to connect using IKEV2 to Win2008R2 Routing and Remote Access server

I'm a networking guy and having this troubling VPM issue that I can't find.
I have a number of VPN connections from my Win7Pro 64 PC to various customers. Their end points are all Windows Routing and Remote Access on Windows 2008R2 STD servers.
Every once and a while I will hang at Verifying User ID and Password and eventually get ERROR 809. Change the security type on my VPN connection from IKEV2 to PPTP - never an issue, connects in right away.
I can also try from another PC (at the same or alternate location) to get into that same server using the same credentials and access - no issue using either IKEV2 or PPTP.
This has happened at various times to various customers. Here is what I know it is not:
- Not the local or remote routers or Firewalls since I can always get in from other PC's going through the same network. Even so, tried rebooting all several times
- Not an ISP issue at either end since I can always get into other IKEV2 servers from the same PC and from other PC's to the server I can't from my PC.
This leads to the only logical conclusion. It is something to do with my Win7Pro 64 PC but for the life of my I can not find it.
I have obviously tried rebooting the Win7Pro PC. I have also tried recreating the VPN connection several times. Nothing.
Help!

Hi,
I know that you've mentioned that it is not a issue about firewall or router settings, but this error usually comes when some firewall between client and server is blocking the ports used by VPN tunnel.
so to allow IKEv2 traffic, please make sure to configure the network firewall to open UDP ports 500 and 4500, and to allow IP protocol 50.
If that is not possible, deploy SSTP based VPN tunnel on both VPN server and VPN client – that allows VPN connection across firewalls, web proxies and NAT
You can refer to this blog
http://blogs.technet.com/b/rrasblog/archive/2006/06/14/which-ports-to-unblock-for-vpn-traffic-to-pass-through.aspx
Regards
Yolanda
TechNet Community Support

Routing and Remote access - internal network not accessing internet through public network!

Hello,
Good Evening to all.
I got an issue in routing and remote access on windows 2003 server. This server is already configured as File server, domain server and Application server. Also configured as router (through routing & remote access) for connecting three different
network to each other. So This server has three NIC card installed and each NIC card represent separate network.
three different network are - 192.42.160.0/24 , 192.42.161.0/24, 192.42.162.0/24
Three NIC card installed on server as with following IP address -
NIC -1 = 192.42.160.220 , Sub- 255.255.255.0 , Gateway - NO
NIC -2 = 192.42.161.220 , Sub- 255.255.255.0 , Gateway - 192.161.220.112 (This ip for internet access so 4g router IP)
NIC -3 = 192.42.162.220, , Sub- 255.255.255.0 , Gateway - NO
Now the issue is I can reach to internet & (also pinging to router ip 192.42.161.112) from only one network that is - 192.42.161.0/24 , BUT when I trying to access internet from another two network (192.42.160.0/24 & 192.42.162.0/24) I cant access
it and moreover can't ping to internet router ip - 192.42.161.112...
So how I can access to internet from other two network also?
I was already configured static routing for all three network but still I was not success. really I don't know what exactly static routing it should be done in routing & remote access so that all three network can reach to internet?
Sorry if I am not able to explain properly. Please let me know if you need more explain on this...
Thanks to all.

Dear Milos,
I am happy to hear from you....
1.- Actually the setup was done long before by another guy and right now I don't want to change it.
Nice to hear from you! Thank you so much. Actually this is first time I am using technet forum upon the suggestion from one of the my friend. So any your help from you will help me a great in this issue...
I ran the route print command and given follow are the results.
I have only added the default route as per the below routes. Please guide me know how to add other static routes for three network.
D:\Documents and Settings\Administrator>route print
IPv4 Route Table
===========================================================================
Interface List
0x1 ........................... MS TCP Loopback interface
0x2 ...00 30 05 ad 8f 5c ...... Broadcom NetXtreme Gigabit Ethernet - Teefer2 Mi
niport
0x3 ...00 0e 0c a7 c4 f8 ...... Intel(R) PRO/1000 GT Desktop Adapter - Teefer2 M
iniport
0x4 ...00 0e 0c a7 c5 85 ...... Intel(R) PRO/1000 GT Desktop Adapter #2 - Teefer
2 Miniport
===========================================================================
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.42.161.112 192.42.161.220 1
127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1
192.42.160.0 255.255.255.0 192.42.160.220 192.42.160.220 20
192.42.160.220 255.255.255.255 127.0.0.1 127.0.0.1 20
192.42.160.255 255.255.255.255 192.42.160.220 192.42.160.220 20
192.42.161.0 255.255.255.0 192.42.161.220 192.42.161.220 20
192.42.161.220 255.255.255.255 127.0.0.1 127.0.0.1 20
192.42.161.255 255.255.255.255 192.42.161.220 192.42.161.220 20
192.42.162.0 255.255.255.0 192.42.162.220 192.42.162.220 20
192.42.162.220 255.255.255.255 127.0.0.1 127.0.0.1 20
192.42.162.255 255.255.255.255 192.42.162.220 192.42.162.220 20
224.0.0.0 240.0.0.0 192.42.160.220 192.42.160.220 20
224.0.0.0 240.0.0.0 192.42.161.220 192.42.161.220 20
224.0.0.0 240.0.0.0 192.42.162.220 192.42.162.220 20
255.255.255.255 255.255.255.255 192.42.160.220 192.42.160.220 1
255.255.255.255 255.255.255.255 192.42.161.220 192.42.161.220 1
255.255.255.255 255.255.255.255 192.42.162.220 192.42.162.220 1
Default Gateway: 192.42.161.112
===========================================================================
Persistent Routes:
None
Regards & Thanks
Mahesh

Set value when a virtual, analog modem should answers in Server 2012 Routing and Remote Access

Hi there,
I googled for hours on the following problem:
We have a Routing and Remote Access Server with an Dialogic Diva PRI card (30 lines). The card provides an analog, virtual modem pool. All this runs on Windows Server 2012 (without R2).
My problem is that the client will be connected after 3 or 4 rings on the line (I can not hear properly with our client device), but it should be connected after the first ring.
Under Server 2000 there was the possibility to set the value "NumberOfRings" in the registry and / or set the modem to ATS0 = 1. Both ways do not work in Server 2012.
Can anyone tell me how it works under 2012?
Thanks and regards
Andre

I assume you followed Dialogic's instructions for configuring the device on Windows Server 2012. It would most likely make more sense to contact Dialogic if you are having issues. They support the product. If it is not working according
to their configuration instructions, they are in the best position to be able to answer your questions.
. : | : . : | : . tim

Server 2003 routing and remote access not passing VPN traffic

I've inherited a network that has two IP scopes that are routed through a Windows 2003 server with Routing and Remote Access. I can ping both sides (we'll call them HQ and Plant) internally. My firewall has an IP from the HQ IP scope and when
I connect via VPN, I can see all the devices on the HQ network including the network card that is in the routing server for that "side". However, if I'm connected via VPN, I cannot get to any of the IPs on the Plant side, not even the card
in the routing server. The buck stops on the server.
I should mention, that the firewall assigns IP addresses that are on the HQ scope, so all VPN connections will have an address from that side.
I'm lost on how to get this set up so my VPN traffic coming in from the HQ side can be routed to the Plant devices.

Hi,
To be honest, your statement confused me a bit.
VPN is used for external client get access to internal resource. When we setup VPN server, we usually have two NICs. We need choose a NIC that will be used when client initiate
a connection request. I prefer to call it external NIC card. The internal one will work as DHCP relay agent. So this is a single way connection. You cannot dial from internal to external.
If I misunderstood you, please elaborate what you are trying to do.
Hope this helps.

Routing and Remote Access Server 2012 r2 Help

Hi all, I just setup a new 2012 R2 server with DHCP, DNS and Routing and Remote Access. When a user logs in to the VPN the DHCP is assigning the wrong IP address. My DHCP Scope is 10.0.10.100 to 10.0.10.199 but it's setting it to 169.254.X.X.
How do I fix this.

169.254.x.x are APIPA addresses which are allocated when the guest cannot see the DHCP server/allocator. Basically there is something wrong with your RRAS setup.
You should never run a remote access server on a DC. It will give you all sorts of name resolution problems. As soon as a client connects, the server acquires an additional IP for the VPN connection and the DC is multihomed. That has been a problem
since NT days and still is.
Bill

Windows 2012 routing and remote access service with same subnet

I have internal server IP range -192.168.1.0/24
Windows routing and remote access service with vpn client IP -192.168.11../22
client side IP subnet is -192.168.1.0/24
So we wan routing \ NATING between 192.168.1.0/24 to 192.168.11.0/22 so if vpn user try to ping 192.168.11.5 it should internally forward all request to 192.168.1.5
Don't forget to mark helpful or answer connect me :- http://in.linkedin.com/in/satya11 http://facebook.com/satya.1000

Hi,
According to your description, my understanding is that VPN client and internal network has the same IP range -192.168.1.0/24. And you want to transfer internal network from IP address 192.168.1.0/24 to 192.168.11.0/22.
Agree with Charles David’s point of view. The easiest way to fix routing confusion would be to either change the VPN subnet or the VPN client subnet.
Or, if you configure Windows Server(RRAS) as VPN server, you may enable NAT to transfer internal IP address:
1. Open RRAS, add NAT.
2. New interface to NAT and configure it as public interface.
3. Open Address Pool tab, add IP address range 192.168.11.0/22.
4. Click Reservations, add reserved IP(192.168.11.0/22) and corresponding internal IP(192.168.1.0/24) one by one.
This would be a lot of workload. Besides, you may use 3rd party devices to transfer subnet IP addresses.
Best Regards,
Eve Wang
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Active directory domain services stopped after removing routing and remote access role

Hello everyone;;
I am in deep trouble.. I did install routing and remote access and then lost connection to the server remotely. Then I connected a monitor to the server and removed the role... then it asked me to restart the server . After logging back in I found
all my active directory service has gone... I can see red cross on active directory domain services.. Also I am able to ping other pcs but other pcs cannot ping my server..
However when I go into the active directory services, it shows all services are running except file replication service. I have tried to start that service but it give error 1053 error..
My server in between loses LAN connection... I dont know what is going on.. Please help!!!
My server is win 2008 R2 ser pack 1
Only one DC....
Has fixed ip,
no DNS server running..

Hi,
The File Replication Service Start Error 1053 error can be caused by damaged Windows system files. Corrupted system files entries can threaten the well-being of your computer. Many events can result in creating system file errors.
Please refer to the articles below to troubleshoot the issue:
File Replication Service Start Error 1053
http://repairerrors.net/file-replication-service-start-error-1053.html
Please Note: Since the website is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.
Regards,
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Routing and Remote Access fails to install

Hello, I recently installed Windows Server 2008 beta 3 onto my new computer, which went smothly. I have ADDS, DHCP, DNS, IIS, Terminal Services, and Network Policy and Access Service installed and they all work perfectly. However, I recently tried to install Routing and Remote Access, but I got the following error message when I finished the configuration wizard: "Installation of the Routing and Remote Access Service failed because: Class not registered (80040154). Whats causing this, and how do I fix this?

I also have this trouble of an error when installing Routing and Remote Access "class not registered..."
It is a Windows Server 2008 RTM clean install.
Added machine to our Windows 2003 domain and then after reboot added Windows Powershell.
Logged in as domain admin and then when tried to add routing and remote access got the message described by everyone else.
Like others I need to know how to get over this problem.

Routing and Remote Access VPN DHCP error

I have a strange problem.
I have a client that is using Server 2012 Standard.
On this server they have Routing and Remote Access configured for VPN client access. Their users that are working outside the office connect to the VPN to access the internal network.
The VPN works fine for the most part. Recently however, it has started having issues.
Periodically (about once every 8 days) I will hear from them that they cannot connect and that they get error 720. I will check the server and the server will have the following errors in the event log:
Warning: No IP address is available to hand out to the dial-in client.
If you check DHCP the server is running fine and will hand out local addresses but it will not hand out addresses to VPN clients. Also the addresses that it HAS previously handed out to VPN clients will not show in the address leases.
The solution strangly enough is to disconnect and reconnect a the VPN client connection that the server has connecting it to a offsite server that it does a SQL sync with.
Any ideas as to what might be causing this? If need be I can post more detailed logs but I am not sure what logs even to post or what data to collect.
Any help is greatly appreciated.

I am experiencing the same issue on a Windows 2008R2 SP1 RAS server. The above statement About increasing the lease time on DHCP does not resolve the problem.
I am also Searching for a Solutions to this issue.
Up to now I have done the Following :
1. Increased the scope/ cleared IP's in DHCP.
2. Ensure that the DHCP server is accessable.
3. Created a Manual Scope on RRAS configurations settings (then clients can connect but cannot access resources on the network). Changing Back to DHCP, you recieve the same 720 Error.
4. Stop and started the DHCP services on the DHCP Server.
5. Stop and Started RRAS Services on RRAS server.
The Only Indication is, that DHCP for some reason does not lease out Addresses to the RRAS server..

HP OfficeJet 6700 throught Remote Desktop in Windows Server 2008

i access a windows server 2008 machine via remote desktop i want to print to my local hp officejet 6700 printer i have my printer resources shared i have downloaded the OJ6700_Basicx64_1315.exe which says its for win server 2008 yet when trying to install it says my OS is not supported. is there any other driver i can use? any way to use a generic driver?

Yes, you can try to download the 990c driver and it should work. (Shane_R) has a post that gives you directions on how to download the alternate drivers. Here is a link that may assist you.
http://h30434.www3.hp.com/t5/Printer-All-in-One-Software-Drivers-e-g-Windows-8/How-to-Assign-Alterna...
Let me know if this helps, thanks.
**Click the KUDOS star on the left to say 'Thanks'**
Please mark a reply "ACCEPTED AS SOLUTION" if it solved your problem, so others can find it.

Mouse not working in Virtual machine (win2k3 32 and 64 bit) on Windows Server 2008 RC1 With Hyper-V Technologies

I have installed two virtual machines(win2k3 32bit and win2k3 64bit ) on Windows Server 2008 RC1 With Hyper-V Technologies (Beta) enterprise. Mouse is getting lost inside VM (using CTRL+ ATL + LEFT ARROW comes mouse control control in host OS).
Is there any setting to make mouse works? Insert Integration Serice setup Disk operation succeeds.

all credits for mike_something
The problem is that the old mousedriver is hooked to the mouse device class.
To remove this dependency, go into the registry and navigate to the key
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\Class\{4D36E96F-E325-11CE-BFC1-08002BE10318}
Remove the value msvmmouf from the UpperFilters Regvalue.
Reboot....
tadaaa!!
If you wish you can take out the drivers completely by deleting these registry hives completely :
The driver:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\msvmmouf
The Service:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\VPCMap
The CopyHook Shell Extension: ( for folder access )
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{30C14BA C-122C-42ED-B319-1139DBF48EB8}\InProcServer32
HKEY_CLASSES_ROOT\Directory\shellex\CopyHookHandle rs\VPCCopyHook
After a reboot you can delete the "Virtual Machine Additions" folder from program files...
Good Luck!

Error 1053 when starting the Routing And Remote Access service

Hi all,
When I tried to start the "Routing And Remote Access" service on Windows 8.1 I got an error message as follow.
Could some one help me please.
Than's.

Hi MRAB,
Please check if all dependences are enabled first.
Then set the start type to Automatic.
Does this issue still occur after a restart?
Alex Zhao
TechNet Community Support

Routing and Remote Access Logs (Windows Server 2008 R2)

Similar Messages

Maybe you are looking for