Windows Server 2022 – RRAS NAT not forwarding traffic – Fix & Prevention

📖 ~1 min read

Table of contents

1. Symptom & Impact
2. Environment & Reproduction
3. Root Cause Analysis
4. Quick Triage
5. Step-by-Step Diagnosis
6. Solution – Primary Fix
7. Solution – Alternative Approaches
8. Verification & Acceptance Criteria
9. Rollback Plan
10. Prevention & Hardening
11. Related Errors & Cross-Refs
12. References & Further Reading

Symptom & Impact

Internal clients lose internet access despite gateway reachability because NAT translation is not active.

Environment & Reproduction

Typically appears after interface rename, service restart, or role updates.

Get-Service RemoteAccess
Get-NetIPInterface
Get-NetRoute

Root Cause Analysis

NAT interface role assignment mismatch or RRAS service state drift prevents packet forwarding.

Quick Triage

Check RRAS service, interface roles, and default route path.

Get-Service RemoteAccess
Get-NetIPInterface | Select InterfaceAlias,Forwarding
Get-WinEvent -LogName System -MaxEvents 20

Step-by-Step Diagnosis

Verify external/internal adapter mapping and forwarding policies.

Get-NetAdapter
Get-NetNat
Get-NetRoute -DestinationPrefix 0.0.0.0/0

Solution – Primary Fix

Re-enable forwarding and recreate NAT mapping.

Set-NetIPInterface -InterfaceAlias 'LAN' -Forwarding Enabled
New-NetNat -Name CorpNAT -InternalIPInterfaceAddressPrefix 10.0.0.0/24
Restart-Service RemoteAccess

Solution – Alternative Approaches

Reconfigure RRAS role if NAT object is inconsistent.

Remove-NetNat -Name CorpNAT -Confirm:$false
New-NetNat -Name CorpNAT -InternalIPInterfaceAddressPrefix 10.0.0.0/24

Verification & Acceptance Criteria

Clients egress through NAT and maintain stable outbound sessions.

Get-NetNat
Test-NetConnection 1.1.1.1 -Port 53
tracert 8.8.8.8

Rollback Plan

Undo NAT changes and return to upstream gateway path if needed.

Remove-NetNat -Name CorpNAT -Confirm:$false
Set-NetIPInterface -InterfaceAlias 'LAN' -Forwarding Disabled

Prevention & Hardening

Pin adapter aliases and validate RRAS config after OS and NIC maintenance.

Get-NetIPInterface | Export-Csv interfaces.csv -NoTypeInformation
Get-NetNat | Export-Csv nat-state.csv -NoTypeInformation

Related Errors & Cross-Refs

Frequently overlaps with missing static routes and firewall egress policy conflicts.

Related tutorial: View the step-by-step tutorial for Windows Server 2022.

View all Windows Server 2022 tutorials on the Tutorials Hub →

Browse all common problems & solutions on the Tutorials Hub.

References & Further Reading

Microsoft Learn: RRAS deployment and NAT configuration on Windows Server.