Comments on: How to Install VPN on Windows Server 2016

By: Inigo

Inigo — Tue, 04 Aug 2020 21:11:34 +0000

Hi there! Great post. I was able to connect right away, but I cannot see any of the network devices. Upon looking at the address, it appears it gave a subnet of 255.255.255.255, when my other devices are on 255.255.255.0. I don’t know where to go from here. Any thoughts?

By: Simon

Simon — Thu, 20 Feb 2020 12:09:08 +0000

Grüezi Thomas, and tha’s about almost all I can say in Schwizertütsch (maybe churchichlächli) :-) And thanks, so I can go on and install the thing even with the webserver. Does it have to be on ? (I had some experience with the ms web server before) but can I just leave it there and shut it down ?

By: Thomas Maurer

Thomas Maurer — Wed, 19 Feb 2020 09:09:39 +0000

In reply to Simon. Hi Simon Thanks happy it helped you. The Routing and RAS Role/feature was depending on some of the technology in the webserver role. No worries it won't install a full web server with everything, only the things you need.

By: Simon

Simon — Wed, 19 Feb 2020 09:03:42 +0000

Hi, tnaks for this tutorial, I have a question though, do I need the web server (IIS) to install the VPN ? I don’t need it and I don’t want it.

Thanks

Simon

By: Doug

Doug — Tue, 07 Jan 2020 15:00:13 +0000

I had installed the Remote Desktop Gateway Service before this, and to get the vpn to work I had to enable (grant access) the “connections to Microsoft Routing and Remote Access” network policy in the NPS.

By: Asim

Asim — Fri, 13 Dec 2019 15:08:14 +0000

Nice guide to setting up but i have a client that i need to provide access on VPN to server the server is on a network connected to a Watchguard firewall with 10.50.70.1 ip range and watchguard is connected to BT internet router with gateway 192.168.1.254. The trouble i am having is how to configure port forwarding to server from BT router with different IP range. My question do i connect one of the 4 gigabit lan connections from the server to the BT router directly or is there another way i have to forward the SSH port 443 to the server for VPN?

By: Steve

Steve — Wed, 24 Jul 2019 08:08:01 +0000

This configuration worked for me to establish a VPN, however once established I was unable to ping the interface on the server or telnet to ports I had a script listening on.
Applying the same config to a 2012 server worked fine so can only assume something has changed in 2016 since this article was written.
Server 2016 build is 10.0.14393, we had initially thought it was due to our server hardening however the issue was present an on a vanilla build as well. I haven’t tried another build of server 2016 and its worth noting this scenario was in a workgroup config rather than in a domain so no group policy configs applied either. Has anyone else experienced a similar issue?

By: Ray

Ray — Sat, 18 May 2019 22:06:58 +0000

Hi, Thank you! nice write up! everything went on based on what you mentioned, the only issues is VPN connection on client stuck on verifying username and password and then it got timed-out. I believe its something related to my server to get authentication from domain controller. the VPN server that I’m using is just member of domain, is there any way that I can let it to get users credential from domain controllers?

By: T

Wed, 04 Apr 2018 15:04:52 +0000

About my previous post.

It turns out I was unable to install any role at all. There is a GPO which redirects the Document folder. This is what was causing the problem.

Thank you

By: T

Tue, 03 Apr 2018 19:39:08 +0000

I get an unidentified error when trying to add Remote Access role.
The only thing I found in the event log has to do with Activation Event ID: 10016 and 8198

I did not activate Windows because I’m testing.

Can I add Remote Access role if Windows server 2016 is not activated?