366
Chapter 7
Connecting to Networks
away from your computer. An asterisk indicates that a host failed to respond. The last host will always be the target computer you specify. If that computer is offline or does not respond to ICMP requests, Tracert will display a series of Request Timed Out messages. As an alternative to Tracert, you can use PathPing. The PathPing tool functions similarly but spends several minutes performing performance testing for more accurate latency information. PRACTICE
Establishing a Remote Access VPN Connection In this practice, you configure a VPN server, and then connect to the VPN server from a client computer.
Exercise 1
Configure a VPN Server
In this exercise, you configure Dcsrv1 as a VPN server to accept incoming connections. Dcsrv1 must have two network adapters: one network adapter that is connected to your internal network (or the public Internet) and a second, private network adapter. You will connect Boston, the VPN client, to the private network adapter and verify VPN connectivity by establishing a VPN connection and connecting to resources on the Internet. This exercise assumes that you have completed Exercise 1 in the previous lesson. If you have not completed that exercise, add the Network Policy And Access Services role before completing this exercise with the Routing And Remote Access Services role service. 1. Using Server Manager on Dcsrv1, create a group named “VPN Users.� Then, create a user account named VPNUser with a complex password. Add the VPNUser account to the Domain Users and VPN Users groups. Next, you need to enable demand-dial routing on the server by following these steps: 2. In Server Manager, right-click Roles\Network Policy And Access Services\Routing And Remote Access, and then choose Disable Routing And Remote Access (if necessary). Then, confirm the dialog box that appears. Disabling routing and remote access allows you to reconfigure it as if it were a newly configured computer. 3. Right-click Roles\Network Policy And Access Services\Routing And Remote Access, and then choose Configure And Enable Routing And Remote Access. 4. On the Welcome To The Routing And Remote Access Server Setup Wizard page, click Next. 5. On the Configuration page, select Remote Access, and then click Next. 6. On the Remote Access page, select VPN, and then click Next. 7. On the VPN Connection page, select the network adapter that connects the server to the Internet. Click Next. 8. On the Network Selection page, select the interface that connects the server to the internal network.