AlwaysOn VPN Connects, but Unable to Access Local Network Resources

%3CLINGO-SUB%20id%3D%22lingo-sub-1273438%22%20slang%3D%22en-US%22%3EAlwaysOn%20VPN%20Connects%2C%20but%20Unable%20to%20Access%20Local%20Network%20Resources%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1273438%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20all%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI've%20been%20struggling%20with%20this%20issue%20for%20a%20couple%20weeks%20now.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20recently%20deployed%20an%20AlwaysOn%20VPNfor%20a%20local%20engineering%20firm%20to%20allow%20employees%20to%20work%20from%20home%20(especially%20with%20the%20pandemic).%20I%20followed%20several%20tutorials%20including%20Microsoft's%20own.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20am%20able%20to%20connect%20successfully%20to%20the%20VPN%20and%20ping%20local%20devices%20and%20servers%20by%20IP%2C%20FQDN%2C%20and%20Common%20Name.%20Th%20eproblem%20is%20that%20I%20cannot%20access%20the%20file%20shares%20on%20the%20primary%20server%20or%20RDC%20into%20any%20of%20them%20through%20any%20methods.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20network%20topology%20is%20something%20as%20follows.%20I've%20got%20a%20Ciena%20(modem%3F)%20for%20our%20fiber%20optic%20internet%20connection.%20That%20is%20connected%20to%20a%20NetVanta%205660%20router%20(with%20the%20appropirate%20firewall%20ports%20opened).%20My%20Windows%20Server%202016%20VPN%2FRouting%2FNAT%20server%20has%20one%20NIC%20connected%20to%20the%20NetVanta%20router%20with%20the%20Public%20IP%20configured%20and%20the%20other%20NIC%20connected%20to%20the%20private%20network%20with%20a%20private%20IP.%20This%20NIC%20is%20connected%20to%20the%20central%20unmanaged%20network%20switch%20where%20al%20other%20wired%20devices%20are%20connected.%20A%20wireless%20AP%20allows%20for%20staff%20with%20wireless%20devices%20to%20connect%20to%20the%20private%20network.%26nbsp%3B%3C%2FP%3E%3CP%3EI%20am%20running%20a%20Windows%20Server%202019%20machine%20configured%20as%20a%20DC%2C%20DHCP%2C%20DNS%2C%20CA%2C%20NPS%2C%20File%2C%20and%20Printing%20server.%20I%20do%20not%20have%20any%20Vms%20in%20the%20evironment%20currently%20as%20I'm%20learning%20this%20stuff%20as%20I%20go.%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20client%20device%20I%20used%20in%20testing%20is%20a%20domain%20joined%20machine%20running%20Windows%2010%20Pro.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHere%20are%20some%20of%20the%20things%20I've%20tried%20in%20my%20conversations%20and%20troubleshooting%20with%20other%20sources.%3C%2FP%3E%3CP%3E-%20Network%20Discovery%20is%20enabled%20on%20both%20of%20the%20servers%20and%20the%20client%20device.%26nbsp%3B%3C%2FP%3E%3CP%3E-%20Problem%20persisted%20with%20all%20firewalls%20disabled.%3C%2FP%3E%3CP%3E-%20Only%20running%20Windows%20Defender%20Antivirus%20currently.%3C%2FP%3E%3CP%3E-%20My%20Private%20DNS%20servers%20are%20working%20as%20I%20can%20resolve%20local%20device%20names.%26nbsp%3B%3C%2FP%3E%3CP%3E-%20I%20CAN%20RDC%20into%20the%20VPN%20server%20successfully%20by%20the%20private%20IP%20and%20Common%20Name%2C%20but%20nothing%20on%20the%20private%20network.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20really%20need%20to%20get%20this%20working%20and%20I've%20just%20hit%20a%20bunch%20of%20dead%20ends.%20If%20anyone%20has%20any%20advice%20I%20would%20greatly%20appreciate%20it.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1273438%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EActive%20Directory%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ENetworking%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESecurity%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3Evpn%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EWindows%20Server%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Highlighted
Occasional Visitor

Hi all,

 

I've been struggling with this issue for a couple weeks now. 

 

I recently deployed an AlwaysOn VPNfor a local engineering firm to allow employees to work from home (especially with the pandemic). I followed several tutorials including Microsoft's own. 

 

I am able to connect successfully to the VPN and ping local devices and servers by IP, FQDN, and Common Name. Th eproblem is that I cannot access the file shares on the primary server or RDC into any of them through any methods.

 

The network topology is something as follows. I've got a Ciena (modem?) for our fiber optic internet connection. That is connected to a NetVanta 5660 router (with the appropirate firewall ports opened). My Windows Server 2016 VPN/Routing/NAT server has one NIC connected to the NetVanta router with the Public IP configured and the other NIC connected to the private network with a private IP. This NIC is connected to the central unmanaged network switch where al other wired devices are connected. A wireless AP allows for staff with wireless devices to connect to the private network. 

I am running a Windows Server 2019 machine configured as a DC, DHCP, DNS, CA, NPS, File, and Printing server. I do not have any Vms in the evironment currently as I'm learning this stuff as I go. 

The client device I used in testing is a domain joined machine running Windows 10 Pro.

 

Here are some of the things I've tried in my conversations and troubleshooting with other sources.

- Network Discovery is enabled on both of the servers and the client device. 

- Problem persisted with all firewalls disabled.

- Only running Windows Defender Antivirus currently.

- My Private DNS servers are working as I can resolve local device names. 

- I CAN RDC into the VPN server successfully by the private IP and Common Name, but nothing on the private network.

 

I really need to get this working and I've just hit a bunch of dead ends. If anyone has any advice I would greatly appreciate it.

0 Replies