70-411 Exam Cram - Configure network services and access

Configure virtual private network (VPN) and routing

Install and configure the Remote Access role

  • The Routing Windows Feature which is a Role Service of the RemoteAccess Role provides NAT routing functionality
  • A Virtual Private Network (VPN) Server must have at least 2 network adapters, one connected to the private network and one connected to the Internet

Implement Network Address Translation (NAT)

  • Network address translation (NAT) allows you to share a connection to the public Internet through a single interface with a single public IP address

Configure VPN settings

  • EAP is required to support smart cards. You can use this protocol only if you are using RADIUS authentication or if the Remote Access Server performing authentication is domain-joined
  • IKEv2 is the latest VPN tunneling protocol supported by Windows. It is the most secure and includes support for IPv6 and fast VPN reconnect
  • SSTP includes support for Windows Vista and uses port 443 making it ideal for networks that block regular VPN traffic
  • L2TP/IPSec supports smart cards and is the most secure method supported by Windows XP

Configure remote dial-in settings for users

  • You can control access through Network Policy Server (NPS) policies or through Active Directory. NPS provides greater control. To grant access without using NPS, set the User's dial-in properties to Allow access. The default setting in Windows Server 2012 R2 is to control access through NPS

Configure routing

  • route add <destination> mask <mask> <gateway> metric <cost metric, or default to 1>

Configure Web Application Proxy in pass-through mode

  • Web Application Proxy can be used to provide clientless (no special software required on the client) access to internal web applications
  • To enable authentication on Web Application Proxy (not pass-through), you will need to deploy an Active Directory Federation Services (AD FS) server

Popular posts from this blog

Get local computer UUID/GUID using Windows Powershell

gPLink and gPOptions

PSLoggedOn Getting Started on Windows Server 2008 R2