Home

Direct Access - IPV6 routing problems.

%3CLINGO-SUB%20id%3D%22lingo-sub-275860%22%20slang%3D%22en-US%22%3EDirect%20Access%20-%20IPV6%20routing%20problems.%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-275860%22%20slang%3D%22en-US%22%3E%3CP%3EHey%20Guys%2C%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Esetting%20up%20my%20first%20direct%20access%20server%20using%20windows%202012%20r2.%20SO%20far%20i%20have%20got%20things%20working%2C%20where%20as%20i%20can%20connect%20to%20the%20DA%20server%20using%20windows%2010%20enterprise.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHowever%20i%20see%20this%20error%20here%3A%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EDirectAccess%20clients%20cannot%20connect%20to%20all%20resources%20on%20the%20corporate%20network.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ECauses%3A%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ERoutes%20required%20to%20send%20packets%20to%20the%20corporate%20network%20have%20not%20been%20published%20on%20adapter%20Ethernet.%20These%20routes%20are%20required%20for%20remote%20clients%20to%20reach%20the%20corporate%20network.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI've%20searched%20for%20the%20error%20message%20and%20havent%20found%20much.%20I%20am%20not%20sure%20what%20routes%20I%20need%20to%20add%3A%20here%20is%20a%20dump%20of%20the%20route%20command%3A%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EPS%20C%3A%5CUsers%5Cadministrator.EXCHANGETEST%26gt%3B%20Get-NetRoute%3C%2FP%3E%3CP%3EifIndex%20DestinationPrefix%20NextHop%20RouteMetric%20PolicyStore%3CBR%20%2F%3E-------%20-----------------%20-------%20-----------%20-----------%3CBR%20%2F%3E17%20255.255.255.255%2F32%200.0.0.0%20256%20ActiveStore%3CBR%20%2F%3E1%20255.255.255.255%2F32%200.0.0.0%20256%20ActiveStore%3CBR%20%2F%3E17%20224.0.0.0%2F4%200.0.0.0%20256%20ActiveStore%3CBR%20%2F%3E1%20224.0.0.0%2F4%200.0.0.0%20256%20ActiveStore%3CBR%20%2F%3E17%20192.168.1.255%2F32%200.0.0.0%20256%20ActiveStore%3CBR%20%2F%3E17%20192.168.1.145%2F32%200.0.0.0%20256%20ActiveStore%3CBR%20%2F%3E17%20192.168.1.0%2F24%200.0.0.0%20256%20ActiveStore%3CBR%20%2F%3E1%20127.255.255.255%2F32%200.0.0.0%20256%20ActiveStore%3CBR%20%2F%3E1%20127.0.0.1%2F32%200.0.0.0%20256%20ActiveStore%3CBR%20%2F%3E1%20127.0.0.0%2F8%200.0.0.0%20256%20ActiveStore%3CBR%20%2F%3E17%200.0.0.0%2F0%20192.168.1.225%20256%20ActiveStore%3CBR%20%2F%3E19%20ff00%3A%3A%2F8%20%3A%3A%20256%20ActiveStore%3CBR%20%2F%3E17%20ff00%3A%3A%2F8%20%3A%3A%20256%20ActiveStore%3CBR%20%2F%3E1%20ff00%3A%3A%2F8%20%3A%3A%20256%20ActiveStore%3CBR%20%2F%3E19%20fe80%3A%3A4805%3Aa161%3A3b24%3Ad9b3%2F128%20%3A%3A%20256%20ActiveStore%3CBR%20%2F%3E17%20fe80%3A%3A529%3A2427%3A39fb%3Ac4c1%2F128%20%3A%3A%20256%20ActiveStore%3CBR%20%2F%3E13%20fe80%3A%3A5efe%3A192.168.1.145%2F128%20%3A%3A%20256%20ActiveStore%3CBR%20%2F%3E19%20fe80%3A%3A%2F64%20%3A%3A%20256%20ActiveStore%3CBR%20%2F%3E17%20fe80%3A%3A%2F64%20%3A%3A%20256%20ActiveStore%3CBR%20%2F%3E17%20fd09%3A4cc7%3A168%3Ac356%3Add7a%3A8dae%3Aaa18%3Ab1a7%2F128%20%3A%3A%20256%20ActiveStore%3CBR%20%2F%3E17%20fd09%3A4cc7%3A168%3A7777%3A%3A%2F96%20%3A%3A%20256%20ActiveStore%3CBR%20%2F%3E19%20fd09%3A4cc7%3A168%3A1000%3A4805%3Aa161%3A3b24%3Ad9b3%2F128%20%3A%3A%20256%20ActiveStore%3CBR%20%2F%3E19%20fd09%3A4cc7%3A168%3A1000%3A%3A2%2F128%20%3A%3A%20256%20ActiveStore%3CBR%20%2F%3E19%20fd09%3A4cc7%3A168%3A1000%3A%3A1%2F128%20%3A%3A%20256%20ActiveStore%3CBR%20%2F%3E19%20fd09%3A4cc7%3A168%3A1000%3A%3A%2F128%20%3A%3A%20256%20ActiveStore%3CBR%20%2F%3E19%20fd09%3A4cc7%3A168%3A1000%3A%3A%2F64%20%3A%3A%20256%20ActiveStore%3CBR%20%2F%3E18%202002%3A%3A%2F16%20%3A%3A%201000%20ActiveStore%3CBR%20%2F%3E1%20%3A%3A1%2F128%20%3A%3A%20256%20ActiveStore%3C%2FP%3E%3CP%3E%3CBR%20%2F%3EPS%20C%3A%5CUsers%5Cadministrator.EXCHANGETEST%26gt%3B%20Get-NetRoute%20-Publish%20yes%3C%2FP%3E%3CP%3EifIndex%20DestinationPrefix%20NextHop%20RouteMetric%20PolicyStore%3CBR%20%2F%3E-------%20-----------------%20-------%20-----------%20-----------%3CBR%20%2F%3E17%20fd09%3A4cc7%3A168%3A7777%3A%3A%2F96%20%3A%3A%20256%20ActiveStore%3CBR%20%2F%3E19%20fd09%3A4cc7%3A168%3A1000%3A%3A%2F64%20%3A%3A%20256%20ActiveStore%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20am%20not%20sure%20where%20to%20go%20from%20here%3F%20What%20routes%20need%20to%20be%20added%3F%20this%20is%20single%20nic%20solution%2C%20also%20i%20cannot%20ping%20other%20servers%20using%20ipv6%20on%20my%20LAN%2C%20but%20can%20ping%20those%20same%20servers%20using%20IPv4.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EJust%20not%20sure%20what%20to%20do%20at%20this%20point.%20Also%2C%20form%20my%20DA%20client%2C%20i%20can%20ping%20the%20DA%20servers%20internal%20IPV6%20IP%20address.%20So%20i%20know%20that%20at%20leas%20something%20is%20working.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%2C%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ERobert%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-275860%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3ENetworking%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EWindows%20Server%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Robert Bollinger
Contributor

Hey Guys, 

 

setting up my first direct access server using windows 2012 r2. SO far i have got things working, where as i can connect to the DA server using windows 10 enterprise. 

 

However i see this error here: 

 

DirectAccess clients cannot connect to all resources on the corporate network.

 

Causes: 

 

Routes required to send packets to the corporate network have not been published on adapter Ethernet. These routes are required for remote clients to reach the corporate network.

 

I've searched for the error message and havent found much. I am not sure what routes I need to add: here is a dump of the route command: 

 

PS C:\Users\administrator.EXCHANGETEST> Get-NetRoute

ifIndex DestinationPrefix NextHop RouteMetric PolicyStore
------- ----------------- ------- ----------- -----------
17 255.255.255.255/32 0.0.0.0 256 ActiveStore
1 255.255.255.255/32 0.0.0.0 256 ActiveStore
17 224.0.0.0/4 0.0.0.0 256 ActiveStore
1 224.0.0.0/4 0.0.0.0 256 ActiveStore
17 192.168.1.255/32 0.0.0.0 256 ActiveStore
17 192.168.1.145/32 0.0.0.0 256 ActiveStore
17 192.168.1.0/24 0.0.0.0 256 ActiveStore
1 127.255.255.255/32 0.0.0.0 256 ActiveStore
1 127.0.0.1/32 0.0.0.0 256 ActiveStore
1 127.0.0.0/8 0.0.0.0 256 ActiveStore
17 0.0.0.0/0 192.168.1.225 256 ActiveStore
19 ff00::/8 :: 256 ActiveStore
17 ff00::/8 :: 256 ActiveStore
1 ff00::/8 :: 256 ActiveStore
19 fe80::4805:a161:3b24:d9b3/128 :: 256 ActiveStore
17 fe80::529:2427:39fb:c4c1/128 :: 256 ActiveStore
13 fe80::5efe:192.168.1.145/128 :: 256 ActiveStore
19 fe80::/64 :: 256 ActiveStore
17 fe80::/64 :: 256 ActiveStore
17 fd09:4cc7:168:c356:dd7a:8dae:aa18:b1a7/128 :: 256 ActiveStore
17 fd09:4cc7:168:7777::/96 :: 256 ActiveStore
19 fd09:4cc7:168:1000:4805:a161:3b24:d9b3/128 :: 256 ActiveStore
19 fd09:4cc7:168:1000::2/128 :: 256 ActiveStore
19 fd09:4cc7:168:1000::1/128 :: 256 ActiveStore
19 fd09:4cc7:168:1000::/128 :: 256 ActiveStore
19 fd09:4cc7:168:1000::/64 :: 256 ActiveStore
18 2002::/16 :: 1000 ActiveStore
1 ::1/128 :: 256 ActiveStore


PS C:\Users\administrator.EXCHANGETEST> Get-NetRoute -Publish yes

ifIndex DestinationPrefix NextHop RouteMetric PolicyStore
------- ----------------- ------- ----------- -----------
17 fd09:4cc7:168:7777::/96 :: 256 ActiveStore
19 fd09:4cc7:168:1000::/64 :: 256 ActiveStore

 

I am not sure where to go from here? What routes need to be added? this is single nic solution, also i cannot ping other servers using ipv6 on my LAN, but can ping those same servers using IPv4. 

 

Just not sure what to do at this point. Also, form my DA client, i can ping the DA servers internal IPV6 IP address. So i know that at leas something is working. 

 

Thanks, 

 

Robert 

 

Related Conversations
Stable version of Edge insider browser
HotCakeX in Discussions on
35 Replies
Tabs and Dark Mode
cjc2112 in Discussions on
30 Replies
flashing a white screen while open new tab
Deleted in Discussions on
14 Replies
Security Community Webinars
Valon_Kolica in Security, Privacy & Compliance on
7 Replies