VPN diconnect causes router failure

I have 2 duplicate Win 2003 servers at 2 sites both providing VPN service
through RRAS. One is experincing a problem that I cannot figure out, the
other is fine.

When any connected user disconnects from VPN, all VPN routing fails for
current and new connections. The only way to allow usage is reboot the
server. I have also tried replacing every piece of hardware at the trouble
site, including a new server adding a new server to the domain and
delegating the Routing to that new server. Any Help?

Andy

is the server also DC? For more and other information, go to http://howtonetworking.com.

Don't send e-mail or reply to me except you need consulting services. Posting on MS newsgroup will benefit all readers and you may get more help.

Bob Lin, MS-MVP, MCSE & CNE
How to Setup Windows, Network, Remote Access on http://www.HowToNetworking.com
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
This posting is provided "AS IS" with no warranties.
I recommend Brinkster for web hosting!

"a.stites" <(E-Mail Removed)> wrote in message news:F7D072BA-98F5-4264-A3B0-(E-Mail Removed)...
I have 2 duplicate Win 2003 servers at 2 sites both providing VPN service
through RRAS. One is experincing a problem that I cannot figure out, the
other is fine.

When any connected user disconnects from VPN, all VPN routing fails for
current and new connections. The only way to allow usage is reboot the
server. I have also tried replacing every piece of hardware at the trouble
site, including a new server adding a new server to the domain and
delegating the Routing to that new server. Any Help?

Andy

Yes, it is the DC runing Active Directory

"Robert L [MS-MVP]" wrote:

> is the server also DC? For more and other information, go to http://howtonetworking.com.
>
> Don't send e-mail or reply to me except you need consulting services. Posting on MS newsgroup will benefit all readers and you may get more help.
>
> Bob Lin, MS-MVP, MCSE & CNE
> How to Setup Windows, Network, Remote Access on http://www.HowToNetworking.com
> Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
> This posting is provided "AS IS" with no warranties.
> I recommend Brinkster for web hosting!
>
> "a.stites" <(E-Mail Removed)> wrote in message news:F7D072BA-98F5-4264-A3B0-(E-Mail Removed)...
> I have 2 duplicate Win 2003 servers at 2 sites both providing VPN service
> through RRAS. One is experincing a problem that I cannot figure out, the
> other is fine.
>
> When any connected user disconnects from VPN, all VPN routing fails for
> current and new connections. The only way to allow usage is reboot the
> server. I have also tried replacing every piece of hardware at the trouble
> site, including a new server adding a new server to the domain and
> delegating the Routing to that new server. Any Help?
>
> Andy

quoted from http://www.ChicagoTech.net
Connection issues on DC, ISA, DNS and WINS server as VPN server

Symptom: You have a Windows 2000/2003 server is configured as VPN running DNS, WINS, you may experience some connection issues. 1) the internal computers can't ping the server by name; 2) if the server is a DC and Master Browser, you may have a computer browsing issue; 3) you may receive Event ID: 4319 - A duplicate name has been detected on the tcp network; 4) You may receive error messages like "No Logon Servers Available to Service your Logon Request" when you try to open file shares or map network drives to the Routing and Remote Access server; 5) if the server is also a DC, you may not be able to logon the domain; 6) if the server is also running ISA, you cannot browse the Web from client computers on the local network, regardless of whether the computers are configured to use Web Proxy or the Microsoft Firewall Client. For example, "The page cannot be displayed" may appear in the Web browser with a "cannot find server or DNS" error message.

Cause: When a VPN client connects to the VPN server, the server creates a PPP adapter to communicate with the remote computer. The server may then register the IP address of this PPP adapter in the DNS or the WINS database. When the internal computers try to connect to the IP address of the PPP adapter, them cannot reach the PPP adapter, then the connections fail.


Don't send e-mail or reply to me except you need consulting services. Posting on MS newsgroup will benefit all readers and you may get more help.

Bob Lin, MS-MVP, MCSE & CNE
How to Setup Windows, Network, Remote Access on http://www.HowToNetworking.com
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
This posting is provided "AS IS" with no warranties.
I recommend Brinkster for web hosting!

"a.stites" <(E-Mail Removed)> wrote in message news:B38111F3-99CE-4CD1-8F92-(E-Mail Removed)...
Yes, it is the DC runing Active Directory

"Robert L [MS-MVP]" wrote:

> is the server also DC? For more and other information, go to http://howtonetworking.com.
>
> Don't send e-mail or reply to me except you need consulting services. Posting on MS newsgroup will benefit all readers and you may get more help.
>
> Bob Lin, MS-MVP, MCSE & CNE
> How to Setup Windows, Network, Remote Access on http://www.HowToNetworking.com
> Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
> This posting is provided "AS IS" with no warranties.
> I recommend Brinkster for web hosting!
>
> "a.stites" <(E-Mail Removed)> wrote in message news:F7D072BA-98F5-4264-A3B0-(E-Mail Removed)...
> I have 2 duplicate Win 2003 servers at 2 sites both providing VPN service
> through RRAS. One is experincing a problem that I cannot figure out, the
> other is fine.
>
> When any connected user disconnects from VPN, all VPN routing fails for
> current and new connections. The only way to allow usage is reboot the
> server. I have also tried replacing every piece of hardware at the trouble
> site, including a new server adding a new server to the domain and
> delegating the Routing to that new server. Any Help?
>
> Andy

But everything works fine until one of the VPN clients disconnect from the
server and then all connections fail. Also it works fine on one of my
servers with the same configuration

"Robert L [MS-MVP]" wrote:

> quoted from http://www.ChicagoTech.net
> Connection issues on DC, ISA, DNS and WINS server as VPN server
>
> Symptom: You have a Windows 2000/2003 server is configured as VPN running DNS, WINS, you may experience some connection issues. 1) the internal computers can't ping the server by name; 2) if the server is a DC and Master Browser, you may have a computer browsing issue; 3) you may receive Event ID: 4319 - A duplicate name has been detected on the tcp network; 4) You may receive error messages like "No Logon Servers Available to Service your Logon Request" when you try to open file shares or map network drives to the Routing and Remote Access server; 5) if the server is also a DC, you may not be able to logon the domain; 6) if the server is also running ISA, you cannot browse the Web from client computers on the local network, regardless of whether the computers are configured to use Web Proxy or the Microsoft Firewall Client. For example, "The page cannot be displayed" may appear in the Web browser with a "cannot find server or DNS" error message.
>
> Cause: When a VPN client connects to the VPN server, the server creates a PPP adapter to communicate with the remote computer. The server may then register the IP address of this PPP adapter in the DNS or the WINS database. When the internal computers try to connect to the IP address of the PPP adapter, them cannot reach the PPP adapter, then the connections fail.
>
>
> Don't send e-mail or reply to me except you need consulting services. Posting on MS newsgroup will benefit all readers and you may get more help.
>
> Bob Lin, MS-MVP, MCSE & CNE
> How to Setup Windows, Network, Remote Access on http://www.HowToNetworking.com
> Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
> This posting is provided "AS IS" with no warranties.
> I recommend Brinkster for web hosting!
>
> "a.stites" <(E-Mail Removed)> wrote in message news:B38111F3-99CE-4CD1-8F92-(E-Mail Removed)...
> Yes, it is the DC runing Active Directory
>
> "Robert L [MS-MVP]" wrote:
>
> > is the server also DC? For more and other information, go to http://howtonetworking.com.
> >
> > Don't send e-mail or reply to me except you need consulting services. Posting on MS newsgroup will benefit all readers and you may get more help.
> >
> > Bob Lin, MS-MVP, MCSE & CNE
> > How to Setup Windows, Network, Remote Access on http://www.HowToNetworking.com
> > Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
> > This posting is provided "AS IS" with no warranties.
> > I recommend Brinkster for web hosting!
> >
> > "a.stites" <(E-Mail Removed)> wrote in message news:F7D072BA-98F5-4264-A3B0-(E-Mail Removed)...
> > I have 2 duplicate Win 2003 servers at 2 sites both providing VPN service
> > through RRAS. One is experincing a problem that I cannot figure out, the
> > other is fine.
> >
> > When any connected user disconnects from VPN, all VPN routing fails for
> > current and new connections. The only way to allow usage is reboot the
> > server. I have also tried replacing every piece of hardware at the trouble
> > site, including a new server adding a new server to the domain and
> > delegating the Routing to that new server. Any Help?
> >
> > Andy