Routing and Remote Access Service (RRAS)

OverviewResources

Once Routing and Remote Access Service (RRAS) is configured to deliver events to EventTracker Manager; alerts, dashboards and reports can be configured into EventTracker.

Some of the Knowledge Packs available in EventTracker are listed below. For more information, please refer Integration Guide.

Security

Alerts

MS RRAS-DHCP RELAY FORWARD packet relay failure: This alert is generated when DHCP RELAY FORWARD packet relay failure event occurs.
MS RRAS-DHCP REPLY packet relay failure: This alert is generated when DHCP REPLY packet relay failure event occurs.
MS RRAS-DHCPV6 relay agent configuration failure: This alert is generated when DHCPV6 relay agent configuration failure event occurs.
MS RRAS-DHCPV6 relay agent incoming msg receive failure: This alert is generated when DHCPV6 relay agent incoming msg receive failure event occurs.
MS RRAS-DHCPV6 relay agent multicast enable failure: This alert is generated when DHCPV6 relay agent multicast enable failure event occurs.
MS RRAS-DHCPv6 relay agent packet discarded: This alert is generated when DHCPv6 relay agent packet discarded.
MS RRAS-DHCPV6 relay event registration failed: This alert is generated when DHCPV6 relay event registration failed.
MS RRAS-DHCPV6R critical section initialize failure: This alert is generated when DHCPV6R critical section initialize failure event occurs.
MS RRAS-DHCPV6R event creation failed: This alert is generated when DHCPV6R event creation failed.
MS RRAS-DHCPV6R event notification failure: This alert is generated when DHCPV6R event notification failure event occurs.
MS RRAS-DHCPV6R memory allocation failure: This alert is generated when DHCPV6R memory allocation failure event occurs.
MS RRAS-DHCPV6R semaphore creation failed: This alert is generated when DHCPV6R semaphore creation failed.
MS RRAS-DHCPV6R stopped: This alert is generated when DHCPV6R stopped.
MS RRAS-DHCPV6R synchronization object creation failed: This alert is generated when DHCPV6R synchronization object creation failed.
MS RRAS-DHCPV6R timer queue creation failed: This alert is generated when DHCPV6R timer queue creation failed.
MS RRAS-DHCPV6R windows socket initialize failure: This alert is generated when DHCPV6R windows socket initialize failure event occurs.
MS RRAS-DLL component load failed: This alert is generated when DLL component load failed.
MS RRAS-Error detected: This alert is generated when error detected.
MS RRAS-Event notification request failure: This alert is generated when event notification request failure event occurs.
MS RRAS-IGMP event creation failure: This alert is generated when IGMP event creation failure event occurs.
MS RRAS-IGMP memory allocation failure: This alert is generated when IGMP memory allocation failure event occurs.
MS RRAS-IGMP proxy failed to register with MGM: This alert is generated when IGMP proxy failed to register with MGM.
MS RRAS-IGMP router failed to register with MGM: This alert is generated when IGMP router failed to register with MGM.
MS RRAS-IGMP socket operation failure: This alert is generated when IGMP socket operation failure event occurs.
MS RRAS-IGMP task scheduling failure: This alert is generated when IGMP task scheduling failure event occurs.
MS RRAS-IGMPv2 network event enumeration failure: This alert is generated when IGMPv2 network event enumeration failure event occurs.
MS RRAS-Interface info hold table creation failed: This alert is generated when interface info hold table creation failed.
MS RRAS-IP address obtain error: This alert is generated when IP address obtain error occurs.
MS RRAS-IP address user disconnected: This alert is generated when IP address user disconnected.
MS RRAS-IP security apply failure: This alert is generated when IP security apply failure event occurs.
MS RRAS-IPBOOTP stopped: This alert is generated when IPBOOTP stopped.
MS RRAS-IPMGM memory allocation failure: This alert is generated when IPMGM memory allocation failure event occurs.
MS RRAS-IPMGM semaphore creation failed: This alert is generated when IPMGM semaphore creation failed.

Reports

MS RRAS-Authentication type: This report provides the details about the Authentication scheme that is used in the RRAS server.

Operations

Alerts

MS RRAS-Client auto disconnected: This alert is generated when client auto disconnected event occurs.
MS RRAS-Client disconnected to RAS automatically: This alert is generated when client disconnected to RAS automatically.
MS RRAS-Client exceeded license limit: This alert is generated when client exceeded license limit.
MS RRAS-Connection attempt failed: This alert is generated when connection attempt failed event occurs.
MS RRAS-Critical section initialization failed: This alert is generated when critical section initialization failed.
MS RRAS-Demand:dial connection initiation failed: This alert is generated when demand:dial connection initiation failed.
MS RRAS-Line disconnected: This alert is generated when line disconnected.
MS RRAS-Link disconnected: This alert is generated when link disconnected.
MS RRAS-Media access control handle failed: This alert is generated when media access control handle failed.
MS RRAS-Memory allocation failure: This alert is generated when memory allocation failure event occurs.
MS RRAS-MGM interface ownership failed: This alert is generated when MGM interface ownership failed.
MS RRAS-NAP enforcement client registration failed: This alert is generated when NAP enforcement client registration failed.
MS RRAS-NapAgent request failure: This alert is generated when NapAgent request failure event occurs.
MS RRAS-Packet filter disabled: This alert is generated when packet filter disabled.
MS RRAS-Port opening failure: This alert is generated when port opening failure event occurs.
MS RRAS-RAS IP address changed: This alert is generated when RAS IP address changed.
MS RRAS-RAS unable to renew IP address: This alert is generated when RAS unable to renew IP address.
MS RRAS-RASMAN Service port enumeration failed: This alert is generated when RASMAN Service port enumeration failed.
MS RRAS-RRAS DHCP relay failure: This alert is generated when RRAS DHCP relay failure event occurs.
MS RRAS-Socket creation failed: This alert is generated when socket creation failed.
MS RRAS-User callback failed: This alert is generated when user callback failed.
MS RRAS-User connected and disconnected again: This alert is generated when user connected and disconnected again event occurs.
MS RRAS-User device disconnection occurred: This alert is generated when user device disconnection occurred.
MS RRAS-User disconnected: This alert is generated when user disconnected event occurs.

Reports

MS RRAS-Accounting Request: This report provides the details about the Accounting request that is requested from the RRAS server.
MS RRAS-Access Request: This report provides the details about the Access request that is requested from the RRAS server.

Compliance

Alerts

MS RRAS-VPN logon success: This alert is generated when VPN logon connects successfully
MS RRAS-User connection failure: This alert is generated when user connection failure event occurs.
MS RRAS-RRAS DHCP relay failure: This alert is generated when RRAS DHCP relay failure event occurs.
MS RRAS-RASMAN service start failed: This alert is generated when RASMAN service start failed.
MS RRAS-IPBOOTP configuration failure: This alert is generated when IPBOOTP configuration failure event occurs.
MS RRAS-Broadcast enabling failure: This alert is generated when broadcast enabling failure event occurs.
MS RRAS-Certificate config failure: This alert is generated when certificate config failure event occurs.
MS RRAS-Communication device failure: This alert is generated when communication device failure event occurs.
MS RRAS-VPN server route configuration failure: This alert is generated when VPN server route configuration failure event occurs.

Reports

MS RRAS-Access Failure: This report provides the details about the Access failures that is attempted in the RRAS server.
MS RRAS-Access Success: This report provides the details about the Access success that is attempeted in the RRAS server.

Scope

The configuration details in this guide are consistent with EventTracker version 8.x and later,Routing and Remote Access Service (RRAS) Microsoft Windows Server 2008 and later.

Documentation:

For more information please refer to the Integration guide