How to enable traffic between VPN clients in Windows Server 2012 R2?

[Eugene Ma]

Hello,

I installed Remote Access role with VPN.

IPv4 Router is enabled: Snaggy - easy screenshots

VPN clients should use static ip pool: Snaggy - easy screenshots

One VPN user is configured to have static ip: Snaggy - easy screenshots

VPN server uses Windows Authentication and Windows Accounting.

With this setup, VPN clients can connect to server, get ip addresses and can see server via server's vpn ip. Server can connect to VPN clients too (Using client's vpn ips). But VPN clients can't communicate with each other.

For example, VPN server has ip 192.168.99.5

VPN Client 1 - 192.168.99.6

VPN Client 2 - 192.168.99.7

I am able to ping 192.168.99.5 from both clients, and able to ping 192.168.99.6 and 192.168.99.7 from server via remote desktop. But I am not able to ping 192.168.99.7 from client 1 and 192.168.99.6 from client 2.

If I trace route from 192.168.99.6 to 192.168.99.7 - I can see that packets goes to server (192.168.99.5) and next hop - request timeout.


What else should I configure to allow network traffic between VPN clients?

Continue reading...