Provisioning VPN client settings using Group Policy

Problem: Today, Microsoft VPN client can be configured in two ways as discussed in this article – a) in-built VPN client b) CM based VPN client. The first method requires end user to know the VPN settings and then create a VPN connection – which needs to be repeated by each user and prone to…

1

How to configure Network Load Balancing (NLB) based cluster of VPN Servers

Hello All, in this blog, I will discuss how to configure a “Network Load Balancing Cluster” of vpn servers to ensure high availability and scalability of vpn service. For information about “Network Load Balancing (NLB)” feature in “Windows Server 2008 R2” please refer the following link: http://technet.microsoft.com/en-us/library/cc725691.aspx How network load balancing cluster enhances scalability of…

0

How to configure RRAS based SSTP VPN server behind F5 BIGIP SSL load balancer

Hello All, In this blog, I will discuss how to load balance SSTP based VPN servers using a F5 BIGIP SSL load balancer. Lets look at the deployment scenario first: You are having a pool of RRAS based VPN servers hosted behind F5 BIGIP load balancer. The F5 BIGIP load balancer terminates the HTTPS connections…

1

Remote Access Deployment – Part 3: Configuring RADIUS Server for remote access

Hello Customers, In this post, I will go through the steps to configure to deploy Network Policy Server (NPS) based RADIUS server to authenticate and authorize the remote access connections coming from RRAS based VPN server. I will try to go through different policy parameters in order to point you to various important policy options…

1

Remote Access Deployment – Part 2: Configuring RRAS as a VPN server

Hello Customers, In this post, I will go through the steps to configure to deploy RRAS as a VPN server. I will try to go through different configuration scenarios in order to point you to various configuration options in RRAS server role. However for your deployment, you may be skipping some of those – depending…

1

Remote Access Deployment – Part 1: Configuring Remote Access Clients

Hello Customers, In my last few articles, I discussed about the design guidelines to consider before deploying  a remote access solution. In the next few articles, I will go through the steps to configure the various components  of the remote access solution. These articles will act as your jump-start guide to quickly build a solution…

0

How to change certificate on SSTP server – in Windows server 2008 R2

Hi Folks, Very soon Windows 7 and Windows Server 2008 R2 will be released and it is very exciting that beta version of these new operating system is available for public download. So, go ahead and start using it and provide your valuable feedback to us. In this blog I will talk about a new…

2

Deploying VPN Reconnect: Step-by-step guide available at

Folks,     The deployment guide for VPN Reconnect is now available at http://download.microsoft.com/download/8/9/0/890C2C54-EE49-4743-A5B0-1F3AD7C36721/Step-by-Step_Deploy_Remote_Access_with_VPN_Reconnect.doc       The guide covers the various requirements for deploying VPN Reconnect and detail steps to configure the various Network Elements. If you have any questions please feel free to post them on this blog or email rrasblog   regards   …

1

How to secure the server running RRAS role after doing upgrade or fresh install of Windows server 2008

Hello,   As you know in Windows server 2008 (WS08) we have removed “Basic Firewall” functionality in RRAS which exist in Windows Server 2003 (WS03).    This leads to following security implications which you should be carefully consider when configuring RRAS on WS08:   1)      If you were running WS03 enabled for RRAS as a…

2

How to deploy SSTP based VPN server and IIS on the same machine

This blog is going to tell about how SSTP can be affected by configuring IIS Server on the same Server and how to get rid of this problem without moving the IIS Server to a different machine.   Let’s us first know what kind of issue can arise if IIS is configured alongwith SSTP on…

1