RRAS: To support remote access connections, IPv4 or IPv6 Remote Access must be enabled on the RRAS server

  • Article

Applies To: Windows Server 2008 R2, Windows Server 2012, Windows Storage Server 2012

This topic is intended to address a specific issue identified by a Best Practices Analyzer scan. You should apply the information in this topic only to computers that have had the Network Policy and Access Service (NPAS) Best Practices Analyzer run against them and are experiencing the issue addressed by this topic. For more information about best practices and scans, see Best Practices Analyzer.

Operating System

Windows Server 2012, Windows Server 2008 R2

Product/Feature

Routing and Remote Access Service (RRAS)

Severity

Warning

Category

Configuration

Issue

Neither 'IPv4 Remote access server' nor 'IPv6 Remote access server' is selected on the Routing and Remote Access Properties page.

Impact

If 'Remote access server' is not selected, then the server cannot support virtual private network (VPN) or dial-up connections.

Resolution

Use 'Routing and Remote Access' in Server Manager to enable 'IPv4 Remote access server', 'IPv6 Remote access server', or both, on the Routing and Remote Access Properties page, as required by your network.

RRAS can be used as a remote access server for network clients using IPv4, IPv6, or both.

Note

If you do not want to use this RRAS server as a remote access server, and this result appears under the Noncompliant tab of the BPA analyzer, you can select this result in the list and click Exclude Result on the right-hand side of the BPA results window.

Membership in the local Administrators group, or equivalent, is the minimum required to complete this procedure.

To configure RRAS to support IPv4 or IPv6 remote access

  1. Start Server Manager. Click Start, click Administrative Tools, and then click Server Manager.

  2. In the navigation tree, expand Roles, and then expand Network Policy and Access Services.

  3. Right-click Routing and Remote Access, and then click Properties.

  4. On the General tab, select IPv4 Remote access server, IPv6 Remote access server, or both, depending on the requirements of your network.

  5. Click OK to save your changes.

  6. If you enable IPv6 Remote access server, then you might have to configure an IPv6 prefix assignment. On the IPv6 tab, under IPv6 prefix assignment, enter the IPv6 address prefix that applies to the IPv6 network segment to which the RRAS server is connected. Click OK to save your changes.

  7. When prompted to restart the router, click Yes

Additional references

For more about the Routing and Remote Access role service, see Routing and Remote Access (https://go.microsoft.com/fwlink/?linkid=153482) on TechNet, and Routing and Remote Access Service in the Windows Server Technical Library.

For more information about configuring RRAS as a remote access server, see Checklist: Installing and Configuring an RRAS VPN Server.