Provisioning VPN client settings using Group Policy

Problem: Today, Microsoft VPN client can be configured in two ways as discussed in this article – a) in-built VPN client b) CM based VPN client. The first method requires end user to know the VPN settings and then create a VPN connection – which needs to be repeated by each user and prone to…


Troubleshooting common VPN related errors

Hello Customers, If you are seeing errors while establishing VPN connection using Windows in-built VPN client,  you have reached the right place. This article will help you to easily troubleshoot some of the common VPN related errors. 1) Error Code: 800 Error Description: The remote connection was not made because the attempted VPN tunnels failed….


How to deploy RRAS based VPN server that gives dedicated IP to remote users/machines and allow them to access Internet using a dedicated public IP address

Hello Customers, In this blog, I will go through the steps to enable the following scenario: Let us say you have a bunch of remote application servers that should be exposed to Internet only after routing them via a central server (which does accounting/firewall etc). And as they are application servers, you will like to…


How to configure Network Load Balancing (NLB) based cluster of VPN Servers

Hello All, in this blog, I will discuss how to configure a “Network Load Balancing Cluster” of vpn servers to ensure high availability and scalability of vpn service. For information about “Network Load Balancing (NLB)” feature in “Windows Server 2008 R2” please refer the following link: How network load balancing cluster enhances scalability of…


SSTP support on Forefront TMG server

Hello Customers, If you are wondering, when will Forefront based VPN server be available on Windows server 2008 – specifically when will Forefront VPN server support SSTP – which is  the VPN tunnel that was added in Windows server 2008/Vista SP1 that provides ubiquitous VPN connectivity across firewalls/NAT using HTTPS. So here is the good…


What type of certificate to install on the VPN server

Hello Friends, In my previous posting related to VPN tunnel selection, I discussed various scenarios in which you need to install a certificate on the VPN server. To summarize this requirement in a nutshell: except PPTP tunnel, for all the other tunnel types (i.e. IKEv2, SSTP and L2TP/IPSec) VPN server machine should be installed with…


How to configure RRAS based SSTP VPN server behind F5 BIGIP SSL load balancer

Hello All, In this blog, I will discuss how to load balance SSTP based VPN servers using a F5 BIGIP SSL load balancer. Lets look at the deployment scenario first: You are having a pool of RRAS based VPN servers hosted behind F5 BIGIP load balancer. The F5 BIGIP load balancer terminates the HTTPS connections…


Windows7 PPPoE or VPN connectivity experience – we would like to hear back from you

Hello Friends, As you know – Windows7 RC is out and we will like to hear back from you ! In Windows7, we did couple of changes on the remote access client that includes dialup, broadband (aka PPPoE) and VPN scenarios. Windows7 brings in simpler connectivity experience inside View Available Networks (VAN) that is shown…


Enhancements to VPN Reconnect in W7 RC

Hello Folks, By now all of you must have heard about the formal release of W7 RC. In case you don’t have it already here is the link from where you can download the RC bits   In RC the RAS team has made some enhancements to the VPN Reconnect feature. Here are…