Forefront UAG DirectAccess Troubleshooting: Forwarding on Network Interface Related Event Viewer Messages

When activating Forefront UAG, interfaces and interface settings are reset. The following Event IDs may appear in the Windows Event Viewer Application log when problems are encountered and the Forefront UAG activation fails. A message also appears in the Forefront UAG Activation Monitor, and the Forefront UAG Management console message box. Resolutions are provided for the Error and Warning messages where possible.

Event ID	Message
10019	Forwarding on the network interface "%1", cannot be disabled.
10020	Forwarding and advertising on the internal IPv6 network interface "%1", cannot be enabled.
10023	Forwarding on the Teredo network interface cannot be enabled.
10024	Forwarding on the Teredo network interface cannot be disabled.
10061	Forwarding on the 6to4 network interface cannot be disabled.
10063	Forwarding on the 6to4 network interface cannot be enabled.
10065	Forwarding and advertising on the network interface "%1", cannot be disabled.
10067	Forwarding and advertising on the ISATAP network interface "%1", cannot be enabled.
10070	Forwarding and advertising on the IP-HTTPS network interface cannot be enabled.
10074	Forwarding on some of the Teredo network interfaces cannot be enabled.
10075	Forwarding on some of the Teredo network interfaces cannot be disabled.

10019 - Forwarding on the network interface "%1", cannot be disabled.

Cause—When you Disable DirectAccess from the Forefront UAG DirectAccess Configuration Wizard, or change the internal interface method (for example from Native IPv6 to ISATAP), on activation, forwarding on a specific network interface cannot be disabled.

Solution—Manually disable forwarding on the specified interface:

At an elevated command prompt, type netsh int ipv6 set int “interface” forwarding=disabled, where “interface” is the specified interface name in the error message.
If the interface still cannot be manually disabled, use the resulting error message to troubleshoot the problem further.
When forwarding is disabled, reactivate Forefront UAG.

10020 - Forwarding and advertising on the internal IPv6 network interface "%1", cannot be enabled.

Cause—On activation, forwarding on a specific network interface cannot be enabled.

Solution— Manually enable forwarding on the specified interface:

At an elevated command prompt, type netsh int ipv6 set int “interface” forwarding=enabled, where “interface” is the specified interface name in the error message.
If forwarding still cannot be manually enabled on the interface, use the resulting error message to troubleshoot the problem further.
When forwarding is enabled, reactivate Forefront UAG.

10023 - Forwarding on the Teredo network interface cannot be enabled.

Cause—When a single or several Teredo interfaces exist on the Forefront UAG DirectAccess server (the default is one Teredo interface), and forwarding cannot be enabled on any of the Teredo interfaces when activating Forefront UAG.

Solution— Manually enable forwarding on the Teredo interface:

At an elevated command prompt, type netsh int ipv6 show int. A list of the current interfaces is displayed.
Type netsh int ipv6 set int “interface” forwarding=enabled where “interface” is the Teredo interface name and can be taken from the output created in step 1.
If forwarding still cannot be manually enabled on the interface, use the resulting error message to troubleshoot the problem further.
When forwarding is enabled, reactivate Forefront UAG.

10024 - Forwarding on the Teredo network interface cannot be disabled.

Cause— When you disable DirectAccess from the Forefront UAG DirectAccess Configuration Wizard, and when a single or several Teredo interfaces exist on the Forefront UAG DirectAccess server (the default is one Teredo interface), on activation, forwarding cannot be disabled on any of the Teredo interfaces.

Solution— Manually disable forwarding on the Teredo interface:

At an elevated command prompt, type netsh int ipv6 show int. A list of the current interfaces is displayed.
Type netsh int ipv6 set int “interface” forwarding=disabled where “interface” is the Teredo interface name and can be taken from the output created in step 1.
If forwarding still cannot be manually disabled on the interface, use the resulting error message to troubleshoot the problem further.
When forwarding is disabled, reactivate Forefront UAG.

10061 - Forwarding on the 6to4 network interface cannot be disabled.

Cause— When you Disable DirectAccess from the Forefront UAG DirectAccess Configuration Wizard, on activation, forwarding on the 6to4 network interface cannot be disabled.

Solution— Manually disable forwarding on the 6to4 interface:

At an elevated command prompt, type netsh int ipv6 show int. A list of the current interfaces is displayed.
Type netsh int ipv6 set int “interface” forwarding=disabled where “interface” is the 6to4 interface name and can be taken from the output created in step 1.
If forwarding on the 6to4 interface still cannot be disabled, use the resulting error message to troubleshoot the problem further.
When forwarding is disabled, reactivate Forefront UAG.

10063 - Forwarding on the 6to4 network interface cannot be enabled.

Cause 1—On activation, forwarding on the 6to4 network interface cannot be enabled.

Solution 1— Manually enable forwarding on the 6to4 interface:

At an elevated command prompt, type netsh int ipv6 show int. A list of the current interfaces is displayed.
Run netsh int ipv6 set int “interface” forwarding=enabled where “interface” is the 6to4 interface name and can be taken from the output created in step 1.
If forwarding on the 6to4 interface still cannot be enabled on the interface, use the resulting error message to troubleshoot the problem further.
When forwarding is enabled, reactivate Forefront UAG.

Cause 2—Duplicate 6to4 interface names exist on the Forefront UAG DirectAccess server.

Solution 2—Uninstall the 6to4 interfaces:

At an elevated command prompt, type ipconfig and from the output check that there are no duplicate interface names.
If there are duplicate interface names, click Start, in Search Programs and files, type Device manager and press ENTER.
In the Device Manager Console, On the View menu, click Show hidden devices.
Expand Network Adapters, uninstall all the 6to4 adapters, reboot the Forefront UAG DirectAccess server, and then activate the Forefront UAG configuration.

10065 - Forwarding and advertising on the network interface "%1", cannot be disabled.

Cause—When you select Disable DirectAccess from the Forefront UAG DirectAccess Configuration Wizard, or change the internal interface method (for example from Native IPv6 to ISATAP), on activation, the specified ISATAP interface cannot be disabled.

Solution—Manually disable the interface:

At an elevated command prompt, type netsh int ipv6 set int “interface” forwarding=disabled advertise=disabled, where “interface” is the interface name specified in the error message.
If forwarding and advertising still cannot be disabled on the interface, use the resulting error message to troubleshoot the problem further.
When forwarding and advertising on the specified interface is disabled, reactivate Forefront UAG.

10067 - Forwarding and advertising on the ISATAP network interface "%1", cannot be enabled.

Cause—On activation, forwarding and advertising cannot be enabled on the specified ISATAP network interface

Solution—Manually configure forwarding and advertising:

At an elevated command prompt, type netsh int ipv6 set int “interface” forwarding=enabled advertising=enabled where “interface” is the interface name of the ISATAP interface specified in the error message.
If forwarding and advertising on the ISATAP interface still cannot be enabled, use the resulting error message to troubleshoot the problem further.
When forwarding and advertising is enabled, reactivate Forefront UAG.

10070 - Forwarding and advertising on the IP-HTTPS network interface cannot be enabled.

Cause—On activation, forwarding and advertising cannot be enabled on the IP-HTTPS network interface.

Solution—Manually configure forwarding and advertising:

At an elevated command prompt, type netsh int ipv6 show int. A list of the current interfaces is displayed.
Type netsh int ipv6 set int “interface” forwarding=enabled advertising=enabled where “interface” is the interface name of the IP-HTTPS interface and can be taken from the output created in step 1.
If forwarding and advertising on the IP-HTTPS interface still cannot be enabled, use the resulting error message to troubleshoot the problem further.
When forwarding and advertising is enabled, reactivate Forefront UAG.

10074 - Forwarding on some of the Teredo network interfaces cannot be enabled.

Cause—Several Teredo interfaces exist on the Forefront UAG DirectAccess server (the default is one Teredo interface), and on activation forwarding cannot be enabled on one or more of the Teredo interfaces.

Solution— Manually configure forwarding and advertising on the relevant Teredo interface:

At an elevated command prompt, type netsh int ipv6 show int. A list of the current interfaces is displayed.
Type netsh int ipv6 show int “interface” where “interface” is the interface name of a Teredo interface, and verify on which Teredo interface forwarding is disabled.
On the Teredo interface where Teredo is disabled, type netsh int ipv6 set int “no of interface” forwarding=enabled where the “no of interface” is the Teredo interface where forwarding is disabled.
If forwarding on the Teredo interfaces still cannot be enabled, use the resulting error message to troubleshoot the problem further.
When forwarding is enabled on all Teredo interfaces, reactivate Forefront UAG.

10075 - Forwarding on some of the Teredo network interfaces cannot be disabled.

Cause— When you Disable DirectAccess from the Forefront UAG DirectAccess Configuration Wizard, and several Teredo interfaces exist on the Forefront UAG DirectAccess server (the default is one Teredo interface), on activation, forwarding cannot be disabled on one or more of the Teredo interfaces.

Solution— Manually disable forwarding on the relevant Teredo interface:

At an elevated command prompt, type netsh int ipv6 show int. A list of the current interfaces is displayed.
Type netsh int ipv6 show int “interface” where “interface” is the interface name of a Teredo interface, and verify on which Teredo interfaces forwarding is enabled.
On the Teredo interface where Teredo is enabled, type netsh int ipv6 set int “no of interface” forwarding=disabled where the “no of interface” is the Teredo interface where forwarding is enabled.
If forwarding on the Teredo interfaces still cannot be disabled, use the resulting error message to troubleshoot the problem further.
When forwarding is disabled on all Teredo interfaces, reactivate Forefront UAG.