All right, moving on,
let's get to work on our VPN server. The VPN server, or Routing
and Remote Access server, or RRAS server,
you will hear it defined as all of those things or any of
those things. RRAS is used to provide VPN services for our
device and user‑based connections.
And if you recall from our conversations in module three,
there are a number of different VPN protocols supported by RRAS. We're
going to focus on to predominantly, IKEv2 for the device‑based
connections and SSTP for our user‑based connections.
Once again, configuring the VPN server does require a variety of different steps.
First, you can provision your VM and join it to the domain.
That domain join is optional.
I'm going to demonstrate it on a domain‑joined machine
here in my demonstration for this course,
but domain join is optional.
Then we'll install our certificates, we will install the Routing and
Remote Access role, and then configure VPN access, and there's a
variety of steps involved in that as well.
Finally,
we'll talk a little bit about optimization and fine tuning for the VPN
server because the default configuration out of the box less than ideal and
probably not quite ready for production support.
So definitely don't recommend installing NPS and RRAS and
just throwing it out there to the world.
There are a number of things that we want to do to make sure that it's capable of handling the load in the real world.