RRAS - Logs

Question

_{Wednesday, March 7, 2018 11:52 AM}

Hello,

Is there any way to check if a given User at a given point of time tried to establish a VPN connection? If the request had actually hit the RRAS server? I have a User that complains about having difficulties with connecting to the service. I would say it's a network issue (mobile network), but I need some proof to back this up:)

I have checked the C:\Windows\System32\LogFiles folder, and there is a bunch of files there, but if I'm seeing correctly, those only represent successful connection attempts. 

A little off topic: how to interpret those C:\Windows\System32\LogFiles\INXXX files? There's some numbers, a bunch of comas, and while I can figure out what some of them mean, some guide would be useful:)

Kind regards,

Wojciech 

All replies (5)

_{Thursday, March 8, 2018 4:54 AM ✅Answered | 1 vote}

Hi rozanw,

Thanks for your question.

Failures for RAS connections can be debugged using RAS logs.

• To enable RAS logs run command “netsh ras set tracing * enabled”
• Now run the scenario that is failing.
• Now flush the RAS logs by “netsh ras set tracing * disabled” command.
• Check the logs at %windir%tracing directory (example path C:\windwos\tracing) .
• Some of the files where you can look to debug the problem are –
  • PPP.log
  • RASMAN.log
  • IASHLPR.log
  • RASAPI32.log
  • RASIPCP.log
• Also see the “Event viewer” and find the events created by “RemoteAccess” to troubleshoot the issue.

List of Event IDs for the Routing and Remote Access Service

https://support.microsoft.com/en-us/help/824866/list-of-event-ids-for-the-routing-and-remote-access-service

Moreover, in order to log RRAS, it’s necessary to turn RRAS logging enabled on the RRAS console, please refer to the following link and exhibit:

/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/ee922651(v=ws.10)

In addition, here is the link refer to Routing and Remote Access Blog for troubleshooting, it may be helpful of you ,

https://blogs.technet.microsoft.com/rrasblog/tag/troubleshooting/

Hope the information above helpful.

Highly appreciate your effort and time. If you have any questions and concerns, please feel free to let me know.

Best regards,

Michael

Please remember to mark the replies as an answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected]

_{Friday, March 9, 2018 7:40 AM}

Hi rozanw,

How are things going on? Was your issue resolved?

Please let us know if you would like further assistance.

Wish you have a nice weekend!

Best regards,

Michael

Please remember to mark the replies as an answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected]

_{Monday, March 12, 2018 8:51 AM}

Hi rozanw,

How are things going on? Was your issue resolved?

Please let us know if you would like further assistance.

Best regards,

Michael

Please remember to mark the replies as an answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected]

_{Thursday, March 15, 2018 9:55 AM}

Hi,

Apologies for the late reply. 

I'll mark it as closed. Unfortunately I can't replicate the issue at will, so my options are limited. But this information might become useful in the future:)

Kind regards,

Wojciech

_{Friday, March 16, 2018 5:34 AM}

Hi rozanw,

Thank you for update.

I'll still stand by with you in this forum. If there is anything else we can do for you, please feel free to let me know.

Highly appreciate your successive effort and time. Thank you for sharing here.

Best regards, 

Michael

Please remember to mark the replies as an answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected]