Steve, I think you just answered my question - there are RRAS settings that you are defining external to the TMG manglement, so no - these will not be persisted between backup/restore operations. You can use netsh to back up and restore RRAS, effectively extending the TMG backup/restore process. FWIW, TMG uses the netsh API to persist the RRAS configuration. Jim From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Steven Comeau Sent: Friday, January 25, 2013 14:19 To: isalist@xxxxxxxxxxxxx Subject: [isalist] Re: TMG restore and RRAS Jim, when I do a restore, a lot of RRAS gets done such as the Network Interfaces and Ports (albeit the configuration of PPTP and L2TP is not enabled for Demand Dial Routing). But under IPV4, the Static Routes and Site to Site connections under General don't get created. If I create the Static Routes manually, data will flow between the various LANs and even between sites (S2S VPNs); however, RRAS won't let me create any interfaces under the General tab. It's all the stuff under IPV4 that I would assume should get created also - especially the Static Routes to allow data to flow between the different subnets. Steve Comeau Associate Director of IT Rutgers Athletics - RAC 83 Rockafeller Road Piscataway, NJ 08854 732-445-7802 732-445-4623 (fax) www.scarletknights.com<http://www.scarletknights.com/> [Description: rutgers100px.gif] [Description: C:\Users\scomeau\AppData\Roaming\Microsoft\Signatures\Steve21.jpg] From: isalist-bounce@xxxxxxxxxxxxx<mailto:isalist-bounce@xxxxxxxxxxxxx> [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Jim Harrison Sent: Friday, January 25, 2013 3:46 PM To: isalist@xxxxxxxxxxxxx<mailto:isalist@xxxxxxxxxxxxx> Subject: [isalist] Re: TMG restore and RRAS Echo.. echo... echo.... :) Steven, When you configure RRAS, is it _all_ done through the TMG manglement? If not, there no reason to expect TMG restore to re-establish any "non-TMG-established" part of the RRAS configuration during restore. From: isalist-bounce@xxxxxxxxxxxxx<mailto:isalist-bounce@xxxxxxxxxxxxx> [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Steven Comeau Sent: Friday, January 25, 2013 06:03 To: isalist@xxxxxxxxxxxxx<mailto:isalist@xxxxxxxxxxxxx> Subject: [isalist] Re: TMG restore and RRAS Hello...o..o...o..o... Steve Comeau Associate Director of IT Rutgers Athletics - RAC 83 Rockafeller Road Piscataway, NJ 08854 732-445-7802 732-445-4623 (fax) www.scarletknights.com<http://www.scarletknights.com/> [Description: rutgers100px.gif] [Description: C:\Users\scomeau\AppData\Roaming\Microsoft\Signatures\Steve21.jpg] From: isalist-bounce@xxxxxxxxxxxxx<mailto:isalist-bounce@xxxxxxxxxxxxx> [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Steven Comeau Sent: Tuesday, January 22, 2013 1:25 PM To: isalist@xxxxxxxxxxxxx<mailto:isalist@xxxxxxxxxxxxx> Subject: [isalist] TMG restore and RRAS I've been testing out a restore of TMG systems by bringing up a 2008R2 server (virtual), then installing TMG, then doing a restore. All seems to work well on systems with 2 NICs (External, Internal), but I've been running into issues when there are several NICs (External, Internal1, Internal2, Internal3, etc.). TMG seems to be fine, but he RRAS service seems to have issues creating the "Static Routes" under IPV4 as well as the "General" section not showing the SitetoSiteVPN connections. Also in RRAS, the Site-to-Site connections I have in Network Interfaces are disabled and the Ports have the L2TP and PPTP ports not enabled for Demand Dial Routing. I can manually enable them, but after a reboot, the settings revert. I've done the removal of RRAS, then did a simple recreate, then modify a TMG rule to see it recreate RRAS, but not everything needed is recreated. Am I doing something wrong? I'd hate to have to rebuild from scratch, but I thought TMG would rebuild all the necessary components for RRAS with a restore. Steve Comeau Associate Director of IT Rutgers Athletics - RAC 83 Rockafeller Road Piscataway, NJ 08854 732-445-7802 732-445-4623 (fax) www.scarletknights.com<http://www.scarletknights.com/> [Description: rutgers100px.gif] [Description: C:\Users\scomeau\AppData\Roaming\Microsoft\Signatures\Steve21.jpg] *** This message contains confidential information and is intended only for the individual named. If you are not the named addressee, you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. E-mail transmission cannot be guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses. The sender therefore does not accept liability for any errors or omissions in the contents of this message, which arise as a result of e-mail transmission. If verification is required please request a hard-copy version. Rutgers University - DIA 83 Rockafeller Road Piscataway, NJ 08854 www.scarletknights.com<http://www.scarletknights.com> *** *** This message contains confidential information and is intended only for the individual named. If you are not the named addressee, you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. E-mail transmission cannot be guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses. The sender therefore does not accept liability for any errors or omissions in the contents of this message, which arise as a result of e-mail transmission. If verification is required please request a hard-copy version. Rutgers University - DIA 83 Rockafeller Road Piscataway, NJ 08854 www.scarletknights.com<http://www.scarletknights.com> *** *** This message contains confidential information and is intended only for the individual named. If you are not the named addressee, you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. E-mail transmission cannot be guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses. The sender therefore does not accept liability for any errors or omissions in the contents of this message, which arise as a result of e-mail transmission. If verification is required please request a hard-copy version. Rutgers University - DIA 83 Rockafeller Road Piscataway, NJ 08854 www.scarletknights.com<http://www.scarletknights.com> ***