Reposting here.
Currently we run DA for our end users, but want to move towards Always on VPN, but can't right now due to limits of our infrastructures (2008 Domain) and our machines (most are LTSB).
We are slowly moving towards this goal though.
The first step is to use VPN for new users (on latest windows not LTSB) but we are running into issues.
Currently we have an on premises Exchange 2013 (three servers) behind two loadbalancers that share a virtual IP that is one to one nat with a public ip address. We also have some remote office in separate subnets that are connected via a MPLS circuit, we don't manage the routers.
We can connect to vpn great and get our offices subnet, but can't reach our other offices. By adding routes into RRAS we can get those too. However once we connect we can not get outlook connection or other publicly available websites we also manage.
If I change to a split tunnel on the client we can get to outlook but the routes I enter to remote offices don't work.
How can I get all these pieces working so I can roll out to new users?
Skype for business works fine during all of this.
per request I'm including the RASMAN.LOG (the only log produced)
[2972] 02-28 16:44:22:580: WorkerThread: Disconnect event signaled on port: VPN1-127[2972] 02-28 16:44:22:580: OVEVT_DEV_STATECHANGE. pOverlapped = 0xfde34940
[2972] 02-28 16:44:22:580: onecoreuap\net\rras\ras\rasman\rasman\worker.c, 2031: Disconnecting port 513, connection 0x0, reason 1
[2972] 02-28 16:44:22:580: Disconnecting Port 0xVPN1-127, reason 1
[2972] 02-28 16:44:22:580: DisconnectPort: Saving Bundle stats for port VPN1-127
[2972] 02-28 16:44:22:580: 10. Throwing away handle 0x0!
[2972] 02-28 16:44:22:580: onecoreuap\net\rras\ras\rasman\rasman\util.c 2327: Disconnected Port 513, reason 1. rc=0x0
[2972] 02-28 16:44:22:580: onecoreuap\net\rras\ras\rasman\rasman\util.c: 2443: port 513 state chg: prev=2, new=3
[2972] 02-28 16:44:22:580: onecoreuap\net\rras\ras\rasman\rasman\util.c: 2459: port 513 state chg: prev=3, new=4
[2972] 02-28 16:44:22:580: 5. Notifying of disconnect on port 513
[2972] 02-28 16:44:22:580: SignalPortDisconnect: Notification handle event for port 513 is not registered.
[2972] 02-28 16:44:22:580: onecoreuap\net\rras\ras\rasman\rasman\util.c: 2573: port 513 async reqtype chg: prev=26, new=0
[2972] 02-28 16:44:22:580: ***** DisconnectType=1,DisconnectReason=4,pConn=0x0,cbports=0,signaled=0,hEvent=0xffffffff,fRedial=0
[2972] 02-28 16:44:22:580: DisconnectPort Complete
[2972] 02-28 16:44:22:580: onecoreuap\net\rras\ras\rasman\rasman\worker.c: 2077: port 513 state chg: prev=4, new=4
[2972] 02-28 16:44:22:580: onecoreuap\net\rras\ras\rasman\rasman\worker.c: 2081: port 513 async reqtype chg: prev=0, new=0
[4384] 02-28 16:44:22:580: DeallocateRouteRequestCommon: pBundle=0xfe092a40, type=0x800
[4384] 02-28 16:44:22:580: DeActivated Route , bundlehandle 0x2, prottype = 2048
[4384] 02-28 16:44:22:580: DeAllocateRoute: PI_Type=0x800, PI_AdapterName=\DEVICE\{6E06F030-7526-11D2-BAF4-00600815A4BD}, PI_Allocated=-1
[4384] 02-28 16:44:22:580: FreeBundle: freeing pBundle=0xfe092a40
[1952] 02-28 16:44:24:598: SendNotificationRequest
[1952] 02-28 16:44:24:598: SignalNetman: IRasEventNotify::RasEvent returned S_FALSE
[1952] 02-28 16:44:24:598: DwSendNotification returned 0x1
[1952] 02-28 16:44:24:598: SetRouterUsage (port:513) : PCB_OpenedUsage = ox0
[1952] 02-28 16:44:24:598: DeviceListenRequest: Clearing Autoclose flag on port VPN1-127
[1952] 02-28 16:44:24:598: onecoreuap\net\rras\ras\rasman\rasman\util.c: 2789: port 513 state chg: prev=4, new=1
[1952] 02-28 16:44:24:598: onecoreuap\net\rras\ras\rasman\rasman\util.c: 2820: port 513 async reqtype chg: prev=0, new=27
[1952] 02-28 16:44:24:598: Listen posted on port: VPN1-127, error code 600
[2972] 02-28 16:44:31:882: WorkerThread: Async work event signaled on port: VPN1-127
[2972] 02-28 16:44:31:882: OVEVT_DEV_ASYNCOP. pOverlapped = 0xfde348d0
[2972] 02-28 16:44:31:882: ServiceWorkRequest: Async op event 27 for port VPN1-127 returned 600
[2972] 02-28 16:44:31:882: WorkerThread: Async work event signaled on port: VPN1-127
[2972] 02-28 16:44:31:882: OVEVT_DEV_ASYNCOP. pOverlapped = 0xfde348d0
[2972] 02-28 16:44:31:882: ServiceWorkRequest: Async op event 27 for port VPN1-127 returned 600
[2972] 02-28 16:44:31:882: WorkerThread: Async work event signaled on port: VPN1-127
[2972] 02-28 16:44:31:882: OVEVT_DEV_ASYNCOP. pOverlapped = 0xfde348d0
[2972] 02-28 16:44:31:882: CompleteListenRequest: PCB_OpenedUsage: 0x0 for port: 513.
[2972] 02-28 16:44:31:882: onecoreuap\net\rras\ras\rasman\rasman\request.c: 9383: port 513 state chg: prev=1, new=5
[2972] 02-28 16:44:31:882: RasmanReceiveFlags = 0x0
[2972] 02-28 16:44:31:882: Inside DeviceListenRequest NumParams 3
[2972] 02-28 16:44:31:882: Found DEV_SPECIFIC_INFO_KEY: Size:68 Offset:115
[2972] 02-28 16:44:31:882: Correlation Guid is {62EC6217-B2FC-4F8A-A749-4C833E393CC5}
[2972] 02-28 16:44:31:882: DwSaveIpAddressInfo: Remote Address=98.246.145.38
[2972] 02-28 16:44:31:882: DwSaveIpAddressInfo: Source Address=192.168.254.180
[2972] 02-28 16:44:31:882: onecoreuap\net\rras\ras\rasman\rasman\worker.c: 2584: port 513 async reqtype chg: prev=27, new=0
[2972] 02-28 16:44:31:882: ServiceWorkRequest: Async op event 27 for port VPN1-127 returned 0
[3008] 02-28 16:44:31:882: ConnectCompleteRequest: entered for port 513
[3008] 02-28 16:44:31:882: onecoreuap\net\rras\ras\rasman\rasman\request.c: 9280: port 513 state chg: prev=5, new=2
[3008] 02-28 16:44:31:882: AllocBundle: pBundle=0xfe092740
[3008] 02-28 16:44:31:882: onecoreuap\net\rras\ras\rasman\rasman\request.c 10582: Mapping Cookie to handle. port = VPN1-127(0xfdc317d0), Bundlehandle = 0x3, linkhandle = 0x3
[3008] 02-28 16:44:31:882: Connection Completed on port: VPN1-127, error code: 0
[3008] 02-28 16:44:31:882: onecoreuap\net\rras\ras\rasman\rasman\request.c: 7791: port 513 async reqtype chg: prev=0, new=26
[2972] 02-28 16:44:32:007: Completed receive - First Frame on VPN1-127, handle=0x428c
[4384] 02-28 16:44:32:007: GetConnectInfo: port VPN1-127
[4384] 02-28 16:44:32:007: GetConnectInfo: size=76, rc=0xx0
[4384] 02-28 16:44:32:007: GetConnectInfo: port VPN1-127
[4384] 02-28 16:44:32:007: GetConnectInfo: size=76, rc=0xx0
[4384] 02-28 16:44:32:007: ProtocolStarted...VPN1-127
[4384] 02-28 16:44:41:397: Usage for the call on VPN1-127 is 0
[4384] 02-28 16:44:41:397: onecoreuap\net\rras\ras\rasman\rasman\request.c, 8824: Activated Route , port = VPN1-127(0xfdc317d0), bundlehandle 0x3, prottype = 2048, dwErr = 0
[4384] 02-28 16:44:41:397: ActivateRouteRequest: NduOpenHandle. 2
[1952] 02-28 16:44:41:397: SendNotificationRequest
[1952] 02-28 16:44:41:397: SignalNetman: IRasEventNotify::RasEvent returned S_FALSE
[1952] 02-28 16:44:41:397: DwSendNotification returned 0x1
[2972] 02-28 16:45:11:534: WorkerThread: Disconnect event signaled on port: VPN1-127
[2972] 02-28 16:45:11:534: OVEVT_DEV_STATECHANGE. pOverlapped = 0xfde34940
[2972] 02-28 16:45:11:534: onecoreuap\net\rras\ras\rasman\rasman\worker.c, 2031: Disconnecting port 513, connection 0x0, reason 1
[2972] 02-28 16:45:11:534: Disconnecting Port 0xVPN1-127, reason 1
[2972] 02-28 16:45:11:534: DisconnectPort: Saving Bundle stats for port VPN1-127
[2972] 02-28 16:45:11:534: 10. Throwing away handle 0x0!
[2972] 02-28 16:45:11:534: onecoreuap\net\rras\ras\rasman\rasman\util.c 2327: Disconnected Port 513, reason 1. rc=0x0
[2972] 02-28 16:45:11:534: onecoreuap\net\rras\ras\rasman\rasman\util.c: 2443: port 513 state chg: prev=2, new=3
[2972] 02-28 16:45:11:534: onecoreuap\net\rras\ras\rasman\rasman\util.c: 2459: port 513 state chg: prev=3, new=4
[2972] 02-28 16:45:11:534: 5. Notifying of disconnect on port 513
[2972] 02-28 16:45:11:534: SignalPortDisconnect: Notification handle event for port 513 is not registered.
[2972] 02-28 16:45:11:534: onecoreuap\net\rras\ras\rasman\rasman\util.c: 2573: port 513 async reqtype chg: prev=26, new=0
[2972] 02-28 16:45:11:534: ***** DisconnectType=1,DisconnectReason=4,pConn=0x0,cbports=0,signaled=0,hEvent=0xffffffff,fRedial=0
[2972] 02-28 16:45:11:534: DisconnectPort Complete
[2972] 02-28 16:45:11:534: onecoreuap\net\rras\ras\rasman\rasman\worker.c: 2077: port 513 state chg: prev=4, new=4
[2972] 02-28 16:45:11:534: onecoreuap\net\rras\ras\rasman\rasman\worker.c: 2081: port 513 async reqtype chg: prev=0, new=0
[4384] 02-28 16:45:11:534: DeallocateRouteRequestCommon: pBundle=0xfe092740, type=0x800
[4384] 02-28 16:45:11:534: DeActivated Route , bundlehandle 0x3, prottype = 2048
[4384] 02-28 16:45:11:534: DeAllocateRoute: PI_Type=0x800, PI_AdapterName=\DEVICE\{6E06F030-7526-11D2-BAF4-00600815A4BD}, PI_Allocated=-1
[4384] 02-28 16:45:11:534: FreeBundle: freeing pBundle=0xfe092740
[1952] 02-28 16:45:13:550: SendNotificationRequest
[1952] 02-28 16:45:13:550: SignalNetman: IRasEventNotify::RasEvent returned S_FALSE
[1952] 02-28 16:45:13:550: DwSendNotification returned 0x1
[1952] 02-28 16:45:13:550: SetRouterUsage (port:513) : PCB_OpenedUsage = ox0
[1952] 02-28 16:45:13:550: DeviceListenRequest: Clearing Autoclose flag on port VPN1-127
[1952] 02-28 16:45:13:550: onecoreuap\net\rras\ras\rasman\rasman\util.c: 2789: port 513 state chg: prev=4, new=1
[1952] 02-28 16:45:13:550: onecoreuap\net\rras\ras\rasman\rasman\util.c: 2820: port 513 async reqtype chg: prev=0, new=27
[1952] 02-28 16:45:13:550: Listen posted on port: VPN1-127, error code 600
Thanks
David