{"id":116,"date":"2017-06-04T18:39:57","date_gmt":"2017-06-04T08:39:57","guid":{"rendered":"http:\/\/kswp01.azurewebsites.net\/?p=116"},"modified":"2019-08-18T18:59:13","modified_gmt":"2019-08-18T08:59:13","slug":"configuring-ras-on-windows-2016","status":"publish","type":"post","link":"http:\/\/kswp01.azurewebsites.net\/?p=116","title":{"rendered":"Configure RAS on Windows 2016 Server"},"content":{"rendered":"

Steps to configure RAS (Remote Access Service) on Windows 2016 Server<\/h3>\n

<\/p>\n

 <\/p>\n

1. Install RAS.<\/p>\n

\"\"<\/a><\/p>\n

 <\/p>\n

2. Select “RAS” and “Routing”<\/p>\n

\"\"<\/a><\/p>\n

 <\/p>\n

3. Click on the orange icon once RAS is installed.<\/p>\n

\"\"<\/a><\/p>\n

 <\/p>\n

4. Select “Deploy VPN Only” (Sorry forgot capturing the screenshot)<\/p>\n

 <\/p>\n

5. Right click on the server and select “Configure and Enable Routing and Remote Access”<\/p>\n

\"\"<\/a><\/p>\n

 <\/p>\n

6. Next<\/p>\n

\"\"<\/a><\/p>\n

 <\/p>\n

7. Select “Custom configuration”<\/p>\n

\"\"<\/a><\/p>\n

 <\/p>\n

8. Select “VPN access”, “NAT” and “LAN routing”<\/p>\n

\"\"<\/a><\/p>\n

 <\/p>\n

9. Start service<\/p>\n

\"\"<\/a><\/p>\n

 <\/p>\n

10. Right click on the server and select “Properties”<\/p>\n

\"\"<\/a><\/p>\n

 <\/p>\n

11. Select “Security” tab and click “Authentication Methods…” then select the authentication methods you use (for all protocols).<\/p>\n

Tick on “Allow custom IPsec pocky for L2TP\/IKEv2 connection” and specify the “Preshared Key” (for L2TP\/IPSEC).<\/p>\n

Select your SSL certificate (for SSTP). Note : The SSL certificate needs to be imported in Personal store in IIS. <\/span><\/p>\n

\"\"<\/a><\/p>\n

\"\"<\/a><\/p>\n

 <\/p>\n

12. Select “IPv4” tan and select “Static address pool” then click “Add…”<\/p>\n

\"\"<\/a><\/p>\n

 <\/p>\n

13. Specify the IP address range for clients.<\/p>\n

\"\"<\/a><\/p>\n

 <\/p>\n

14. Open “Computer Management” and right click on the user account and select “Properties”<\/p>\n

\"\"<\/a><\/p>\n

 <\/p>\n

15. Select “Dial-in” tab and “Allow access”<\/p>\n

\"\"<\/a><\/p>\n

 <\/p>\n

16. Go back to RAS manager and right click “NAT”, then select “New Interface…”<\/p>\n

\"\"<\/a><\/p>\n

 <\/p>\n

17. Select “Ethernet 2” (or a physical NIC)<\/p>\n

\"\"<\/a><\/p>\n

 <\/p>\n

18. Select “Public interface connected to the Internet” and tick “Enable NAT on this interface:<\/p>\n

\"\"<\/a><\/p>\n

 <\/p>\n

19. Allow 500\/UDP and 4500\/UDP in Windows Firewall, as well as on your Firewall.<\/p>\n

\"\"<\/a><\/p>\n

 <\/p>\n

When using L2TP\/IPSEC on a Windows PC<\/h5>\n

Create and configure the AssumeUDPEncapsulationContextOnSendRule<\/strong> registry value, follow these steps:<\/p>\n

    \n
  1. Log on to the Windows Vista client computer as a user who is a member of the Administrators group.<\/li>\n
  2. Click Start, <\/strong>point to All Programs<\/strong>, click Accessories<\/strong>, click Run<\/strong>, type regedit<\/span>, and then click OK<\/strong>. If the User Account Control<\/strong> dialog box is displayed on the screen and prompts you to elevate your administrator token, click Continue<\/strong>.<\/li>\n
  3. Locate and then click the following registry subkey:\n
    HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Services\\PolicyAgent<\/strong><\/div>\n

    Note <\/span>You can also apply the AssumeUDPEncapsulationContextOnSendRule<\/strong> DWORD value to a Microsoft Windows XP Service Pack 2 (SP2)-based VPN client computer. To do this, locate and then click the following registry subkey:
    \nHKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Services\\IPSec<\/strong><\/li>\n

  4. On the Edit<\/strong> menu, point to New<\/strong>, and then click DWORD (32-bit) Value<\/strong>.<\/li>\n
  5. Type AssumeUDPEncapsulationContextOnSendRule<\/span>, and then press ENTER.<\/li>\n
  6. Right-click AssumeUDPEncapsulationContextOnSendRule<\/strong>, and then click Modify<\/strong>.<\/li>\n
  7. In the Value Data<\/strong> box, type “2”<\/li>\n
  8. Click OK<\/strong>, and then exit Registry Editor.<\/li>\n
  9. Restart the computer.<\/li>\n<\/ol>\n

    Reference : https:\/\/support.microsoft.com\/en-us\/help\/926179\/how-to-configure-an-l2tp-ipsec-server-behind-a-nat-t-device-in-windows-vista-and-in-windows-server-2008<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

    Steps to configure RAS (Remote Access Service) on Windows 2016 Server<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[7,6],"tags":[],"_links":{"self":[{"href":"http:\/\/kswp01.azurewebsites.net\/index.php?rest_route=\/wp\/v2\/posts\/116"}],"collection":[{"href":"http:\/\/kswp01.azurewebsites.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/kswp01.azurewebsites.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/kswp01.azurewebsites.net\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/kswp01.azurewebsites.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=116"}],"version-history":[{"count":16,"href":"http:\/\/kswp01.azurewebsites.net\/index.php?rest_route=\/wp\/v2\/posts\/116\/revisions"}],"predecessor-version":[{"id":280,"href":"http:\/\/kswp01.azurewebsites.net\/index.php?rest_route=\/wp\/v2\/posts\/116\/revisions\/280"}],"wp:attachment":[{"href":"http:\/\/kswp01.azurewebsites.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=116"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/kswp01.azurewebsites.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=116"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/kswp01.azurewebsites.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=116"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}