|
To configure Routing and Remote Access using server 2003
with 1 network adapter:
[ Note: you can click on any step to see a screen shot]
- Open the RRAS
(Routing and Remote Access Service) console located under Administrative
tools
- This outline assumes
RRAS is not enabled. If so there will be a red dot,
in the RRAS, on the server name
-
Highlight the server
name, right click on it, and choose
Configure and
Enable Routing and Remote Access
- Click
Next
-
Select
Custom Configuration
- Select
VPN Access
- Click
Finish
-
Choose
Yes to start the RRAS service
- As is, this will
allow clients to connect to the RRAS server, however it will assign them an
IP in the 169.254.0.0/16 (169.254.x.x) subnet, using APIPA (Automatic
Private IP Addressing). For users to connect to other LAN devices, static
routes will have to be added, or you can add a static address pool in the
same subnet as your LAN for VPN clients.
- To add a static
address pool, in the RRAS console right click on the server name and choose
Properties
-
On the
IP 'tab' select
Static Address Pool and
then Add
- Enter a
Start and End IP that is a subset of
your existing LAN. Assuming your LAN uses 192.168.100.0/24 (192.168.100.x)
choose something that does not conflict with existing devices or DHCP scopes
such as 192.168.100.90 to 192.168.100.99 and then select
OK, and OK
- You
also have to grant the user permission to use the VPN connection. To do so,
open Active Directory Users and Computers, view the appropriate user
profile, and on the "Dial-in" tab select "Allow access".
Note: VPNs require that the subnet from
which your clients are connecting be different than that of your LAN. As an
example if your LAN uses 192.168.1.0/24 (192.168.1.x) no client can connect
from a site using that same subnet. Therefore it is always best to use a LAN
subnet that is not common, to avoid conflict for mobile users. Though this
is an important in your VPN deployment, careful consideration should be made
as to the impact on your existing LAN if you decide to change it.
Other configurable
options:
DHCP
Relay Agent
Number of open ports
Routing
Configuring the client
|
