WAN Miniport: What It Is and How to Fix Driver Issues

You might’ve noticed that multiple WAN Miniports suddenly appeared in your Device Manager settings. These built-in drivers usually don’t require manual configuration, but sometimes they can cause connection issues with VPNs or internet access.

This article explains what a WAN Miniport is and why Windows creates them. It also contains clear, step-by-step fixes for common miniport driver errors that can impact your network or VPN connectivity.

What Is a WAN Miniport?

A Wide Area Network (WAN) Miniport (sometimes referred to as “mini WAN port”) is a virtual network driver, which is a piece of software built into Windows. It helps manage different types of connections.

A WAN is any network that connects computers over long distances. The internet is one example of a WAN connection.

Primarily, WAN Miniports provide pathways for Windows to run two specific connection types:

• Virtual Private Network (VPN) protocols: Rulebooks that tell your computer how to connect to a VPN server.
• Point-to-Point Protocol over Ethernet (PPPoE): An older Internet broadband standard that requires a username and password to connect.

Windows uses WAN Miniport drivers automatically when you set up a new VPN profile. These miniports exist so you don’t have to install drivers each time you set up a VPN or PPPoE connection. 

You can find WAN Miniport entries in your Device Manager under Network Adapters. Usually, you don’t need to configure miniports unless the Device Manager shows missing or duplicated miniports (usually accompanied by a yellow warning symbol), which can disrupt your internet or VPN connection.

Here’s a summary:

A WAN Miniport Is…	A WAN Miniport Is Not…
A Windows virtual driver (a small piece of software)	A physical network card (chip inside your computer)
The bridge Windows uses for VPN and PPPoE protocols	A standalone app you can open or run
Reused across multiple connections	Duplicated each time you add a VPN
Something you should reinstall only if corrupted or missing	Something to casually delete from the Device Manager

How a WAN Miniport Works

The following process happens in the background when you set up a VPN or a PPPoE connection on Windows:

1. Connection setup: Windows creates a connection profile and stores the settings needed to establish the VPN or PPPoE connection.
2. WAN Miniport activation: Windows assigns the correct WAN Miniport driver for the VPN protocol or a PPPoE connection.
3. Connection established: The miniport works with the Windows networking stack to create a virtual network connection.
4. Data transmission: Applications send data through the virtual connection rather than directly through the physical network adapter.
5. Protocol processing: Windows applies the rules and encapsulation required by the selected VPN protocol or PPPoE connection. 
6. Security processing (VPN only): If you’re using a VPN, the VPN protocol encrypts your traffic before it leaves your device. PPPoE connections do not provide encryption on their own.
7. Internet transmission: Windows sends the processed traffic through your computer’s Wi-Fi or Ethernet adapter, where it’s transmitted across the network.

WAN Miniport Driver Types

Windows uses two internal WAN Miniport driver models to run connections: NDISWAN and CoNDIS WAN. They control how different pieces of networking software and hardware talk to each other.

• Network Driver Interface Specification WAN (NDISWAN): This is the earlier model where VPN and PPPoE data move without security considerations. Modern Windows keeps this driver type for compatibility with older software, but it’s mostly deprecated due to safety risks¹.
• Connection-Oriented NDIS WAN (CoNDIS WAN): This is a modern driver type that not only manages data packets but also tracks the connection state (when and how a session begins and who initiates it) and applies more consistent security rules.

You don’t interact with these driver types. Instead, you can see protocol entries in the Device Manager.

WAN Miniport Protocol Types

Common WAN Miniport protocols include:

• WAN Miniport IP: Provides support for IPv4, an addressing system with shorter numeric addresses (like 192.168.1.1) used to identify devices on a network or the internet. 
• WAN Miniport IPv6: Provides support for IPv6, which uses longer addresses (like 2001:db8::1) to fix the shortage of IPv4 addresses. 
• WAN Miniport PPPoE: Connects to ISPs that ask for a username and password before giving you internet access. Common on DSL lines, though less used today.
• WAN Miniport L2TP: Powers Layer 2 Tunneling Protocol VPNs. L2TP on its own does not encrypt data², so it is almost always paired with IPsec for security.
• WAN Miniport IKEv2: Handles a secure protocol often used for mobile devices. It works with IPsec VPN connections.
• WAN Miniport PPTP: Supports an older Point-to-Point Tunneling VPN Protocol that’s fast but insecure by today’s standards.
• WAN Miniport SSTP: Sends VPN traffic using the TLS protocol on port 443 to run Secure Socket Tunneling VPN Protocol, often used on strict networks that restrict other VPN types.

WAN Miniports Uses

In Windows, WAN Miniports act as middlemen between WAN connections (VPN and PPPoE) and the internet. While you usually won’t notice them, they’re essential because they:

• Make VPN connections work: WAN Miniport creates the tunnel for a given VPN protocol. Without it, Windows cannot form the encrypted tunnel that masks your IP address and secures traffic via a VPN app.
• Sign in on PPPoE lines: PPPoE miniports set up the login session for older DSL internet that requires a username and password. They make sure to add your credentials to the Ethernet link so the connection can start.
• Separate multiple network connections: Miniports separate different types of connections to avoid conflicts between sessions. This allows you to run a PPPoE login and a VPN profile side by side on the same PC without one breaking the other.
• Help you troubleshoot: If a miniport driver is missing or corrupted, Windows shows a warning in the Device Manager. This signals that the specific protocol method (such as IKEv2 VPN) is broken at the system level and needs repair.

Fixing WAN Miniport Connection Issues

Problems with the WAN Miniport can happen due to driver issues, broken system files, incorrect setup, or malware. Luckily, these issues are usually easy to fix and don’t take much effort.

1. Manually Update the WAN Miniport Driver

Problem: Old or corrupted miniport drivers can stop a VPN from starting a session or a PPPoE login from working. 

Solution: Try updating the drivers.

1. Open Device Manager (or press Windows + R and enter devmgmt.msc).
2. On the menu bar, click View and select Show hidden devices.

3. Expand Network adapters, find the correct WAN Miniport (usually the entry with the issue), and select Update driver.

4. Select Search automatically for drivers to let the system check locally and online.
5. Restart your PC to test the VPN connection.

Alternatively, you can update the WAN Miniport driver via trusted driver updating software.

2. Repair System Files

Problem: Damaged core Windows files may be the reason you don’t see WAN Miniports or have too many duplicate drivers in the Device Manager. This often happens after system changes, including Windows crashes, a failed VPN install, or other network misconfigurations³.

Solution: Use Windows’ built-in repair tools (SFC and DISM) that verify and replace damaged files with “healthy” versions.

1. Open the Start menu, type cmd, right-click on Command Prompt, and select Run as administrator.

2. Run the command sfc/scannow and press Enter to scan protected Windows files and replace corrupted or missing components with clean versions.

3. Enter these commands one at a time to reset networking:

1. Run netsh winsock reset to reset the Winsock catalog, which manages some network communication in Windows. This fixes issues caused by broken or malicious network configurations.
2. Run netsh int ip reset to rewrite the TCP/IP stack (rules that tell Windows how to send and receive internet data) to default settings, possibly fixing internet problems with WAN Miniports. Reboot your device to ensure the changes take effect.

4. Enter these DISM commands in the same elevated window, one at a time:

1. Run DISM /Online /Cleanup-Image /CheckHealth to check if Windows has already flagged the system image as damaged.
2. Run DISM /Online /Cleanup-Image /ScanHealth for a deeper check of image files.
3. Run DISM /Online /Cleanup-Image /RestoreHealth to replace corrupted files with healthy ones.

5. Restart the PC to confirm if the WAN Miniports load and work in the Device Manager.

3. Reinstall WAN Miniports Manually

Problem: A WAN Miniport may vanish completely or show a Code 28 or Code 31 error, meaning Windows can’t find the correct driver.

Solution: Add the miniport from Windows’ list of Microsoft adapters.

1. In Device Manager, select Network Adapters, open the Action menu, and select Add legacy hardware.

2. In the Add Hardware window that appears, select Install the hardware that I manually select from a list.

3. Under Common hardware types, click Network adapters.

4. Choose Microsoft as the manufacturer and select Microsoft KM-TEST Loopback Adapter.

5. Restart the PC.

4. Check for Malware

Problem: Malicious software can damage system files responsible for the correct working of the WAN Miniports. This causes them to create duplicates, fail to load, or create connection failures.

Solution: Run a full scan with Windows Security or a trusted antivirus product. For example, PIA’s Antivirus can find and delete malware and isolate and block suspicious file downloads. It also notifies you about dangerous links and websites, so you can avoid potential dangers.

FAQs

References:

1. NDIS 6.30 Backward Compatibility – Microsoft
2. What Is L2TP (Layer 2 Tunnel Protocol)? – Palo Alto Networks
3. Code 31 error in Device Manager for WAN Miniport (Network monitor) device in Windows – Microsoft