VPN acces to sbs 2008 kills the routung and remote access service

I am currently haveing a problem with a new install for sbs2008 server with
the routung and remote access service when using a VPN connection on to the
server

The VPN connects to the server with out any problems
the problem is that when you disconnect the vpn the routung and remote
access service goes in to stopping status and any new vpn connections will
not work
the only way so far i have found to fix this is to restart the server
Has any one else had this problem?

nothing is getting logged in to the events log

any help in resolving this problem would be very helpful

Mark

 

Hello,

Thank you for posting here.

According to your description, I understand that:

The Routing and Remote access service stops unexpectedly when user
disconnects the VPN connection.

If I have misunderstood the problem, please don't hesitate to let me know.

For further investigation, please help to collect the following information:

1. Please configure logging in RRAS and collect the logs.

Configure Logging Levels for RRAS
http://technet.microsoft.com/en-us/library/dd458953.aspx

2. From the description that you have to restart the server to fix it, I'd
like to know whether you can restart the service in the RRAS MMC. If not,
what error message is promoted?

3. You may collect the MPS report (PFE version) on the SBS server for the
analyzing. The MPS Reporting Tool is utilized to gather detailed
information regarding a systems current configuration including event logs.
To collect the PFE log:

1. Please download MPS Reporting Tool (MPSRPT_PFE.EXE) from the following
link:
(http://www.microsoft.com/downloads/details.aspx?FamilyID=00ad0eac-720f-4441
-9ef6-ea9f657b5c2f&DisplayLang=en)

Please note: The link may be truncated when you read the E-mail. Be sure to
include all text between '(' and ')' when navigating to the download
location.

2. Right click MPSRPT_PFE.EXE and select Run as Administrator to run this
tool, and you will see a Command Window start up.

3. Please type Y with the message of <Include the MSINFO32 report?
(defaults to Y in 15 seconds)[Y,N]?

4. When the tool is done you will see an Explorer Window opening up the
%systemroot%\MPSReports\Setup\Reports\cab folder and containing a
<Computername>MPSReports.cab file. Then send the package to me at
for further investigation.

Hope this helps. Also, if you have any questions or concerns, please do not
hesitate to let me know.





Best regards,

Miles Li
Microsoft Online Newsgroup Support

==================================================================
Please post your EBS related questions to the EBS newsgroup on Connect
website:
https://connect.microsoft.com/ebs08/community/discussion/richui/default.aspx


If you want to use a newsreader other than a web forum to access these
newsgroups,
please refer to the following blog to apply NNTP password and configure a
newsreader:
http://msmvps.com/blogs/bradley/archive/2008/11/02/signing-up-for-the-sbs-20
08-newsgroups.aspx
==================================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
==================================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
==================================================================

 

Mark,

We have a new SBS2008 server with the same issue. It has been running for
about 3 weeks and didnt have this issue initially. After a reboot you can
connect to RWW and XP VPN clients can connect, then at some point the issue
returnes and new VPN connections an RWW connections fail.
When the server is rebooted you can start and stop the Routing & Remote
Access service fine. But when the issue returns, you cannot stop the service
even through MMC Routing console. It goes into Stopping state and reboot is
required.

I have seen some reports that it might be AV related, with AV products using
the TDI driver. We have Symantec Endpoint Protection v11 on this server (just
basic AV no threat protection etc)

Looking into this at the moment
http://support.microsoft.com/default.aspx?scid=kb;EN-US;961775

 

I downloaded the HOTFIX but when i went to install it, it said the "Update
did not apply to this system". Even though the doc said it was for Vista SP1
or Win2008 Server ????

 

Your best method is to use a Firewall Appliance that support VPN
Endpoint at the Firewall device itself.

This provides a much better control of the VPN solution and restrictions
and it puts the load on the Firewall instead of the server. Depending on
your firewall, this can also provide a dual-layer authentication method
that is isolated from the Windows Server structure.

 

I have almost the same issue as PTSS. VPN will work for a while and then
connection attempts will start failing at some point. I also then cannot stop
the RRAS service, it just sits at "Stopping", for days, until the server is
rebooted.

I believe that I have other problems tied to this, like Windows Update not
running, and I also cannot stop the Automatic Update service. Actually I
cannot stop any of the Services that are tied to that instance of svchost.
(from a "tasklist /svc" output) I had not heard of the possibility of
antivirus being the problem, but we are also running Symantec Endpoint 11. I
may try removing that.

I have found almost nothing anywhere about this problem. Anyone else have
any ideas? PTSS, have you found any resolution?

Thanks,
Grant