So now that we have all of our certificates in place,
we can move on with installing the role.
And here again there's two options, you can do this through the GUI,
or as I like to call it the hard way, or you can do this using PowerShell.
I'm going to demonstrate how to use PowerShell because it's the quickest,
easiest, simplest, most effective way to do this.
Again, if you're a UI commander, knock yourself out.
There's just a lot of clicking that you're going to have to do, with PowerShell,
it is just a handful of commands, literally two or three commands.
So, let's open an elevated PowerShell command window.
We're going to install the Windows Feature again, so Install‑WindowsFeature.
And in this case, the role here is called DirectAccess‑VPN.
And by the way, it is the same role as Server 2012,
2012 R2, 2016, 2019 DirectAccess, it's the same role,
we're just going to configure it a little bit differently.
In this case,
we also want to include our management tools, and we'll
go and click OK and let that run.
And once again for expedience, I've sped that process up.
It usually takes a few minutes to install that role,
but bottom line is the role is installed,
and we're ready to configure it.
Now, once again, there's a couple of different ways to configure the role.
First is the UI, and I'm going to actually show you that a little bit here.
I'm going to discourage it because, again,
we're going to use PowerShell, and you're going to see how much easier it is.
But,
if we go here to the Start menu and find what's known as
the Routing and Remote Access management console, it will
be under Administrative Tools, and scroll down a little bit until we find it.
And by the way, while I'm here,
I'm going to go ahead and pin it to the taskbar because
I'm going to use this quite frequently.
So, I'm going to open up the Routing and Remote Access management console.
And by the way, this differs from the Remote Access Management console,
which I will show you here.
I'm going to pin this to the taskbar now because we're going to use it later,
but this is not the tool that we're going to use to perform our
initial configuration we actually want to use the Routing and
Remote Access management console.
So, there is a wizard here.
So if you were to right‑click on the Server,
you could choose Configure and Enable Routing and Remote Access and walk
through a deployment wizard to set up Always On VPN or to set up the
server to support Always On VPN connections.
However, it's even easier than that.
So I'm going to cancel out of this.
I'm going to go back to the PowerShell,
and we're just going to run one more quick command, and
that command is install‑RemoteAccess.
And then the switch we're going to use is VpnType, and the VpnType is VPN.
And then we're going to add the Legacy switch.
And we'll do PassThru just so we can have a look at it.
And there you have it,
essentially everything that we had would've clicked
through the GUI there for 10 or 15 minutes we've done in
two very quick PowerShell commands.
So you can see that some of the configuration's already been picked up,
it identified our SSL certificate for us already.
Of course,
all of these settings are the default settings, and they're not
going to work for us. We're going to have to go into the UI now and do some additional configuration.