Enable IP Packet Forwarding

Updated: April 30, 2010

Applies To: Windows Server 2008, Windows Server 2008 R2

For remote access clients to have access to resources on the intranet, such as file shares and printers, the VPN server must be able to forward packets between the clients and the intranet.

Membership in the local Administrators group, or equivalent, is the minimum required to complete this procedure.

1. Open the Routing and Remote Access MMC snap-in.

2. In the console tree, right-click the server name, and then click Properties.

3. On the General tab, select IPv4 Router.

4. Make sure that Local area network (LAN) routing only is selected.

5. Select IPv4 Remote access server.

6. On the IPv4 tab, select Enable IPv4 Forwarding.

7. Click OK.

8. The changes you made require the server to restart. Click Yes to restart the server.

Membership in the local Administrators group, or equivalent, is the minimum required to complete this procedure.

1. Open the Routing and Remote Access MMC snap-in.

2. In the console tree, right-click the server name, and then click Properties.

3. On the General tab, select IPv6 Router.

4. Make sure that Local area network (LAN) routing only is selected.

5. Select IPv6 Remote access server.

6. On the IPv6 tab, select Enable IPv6 Forwarding.

7. If you want the server to be the default IPv6 gateway for the remote access clients, make sure that Enable Default Route Advertisement is selected.

8. In the IPv6 prefix assignment box, enter the 16-bit prefix that you want to use for all remote client IPv6 addresses (for example, 2001:DB8:1A24:E806::).

9. Click OK.

10. The changes you made require the server to restart. Click Yes to restart the server.