All right, that wraps up this module on configuring
VPN infrastructure. Great module, you've,
if you followed all the way through, now you have a working VPN infrastructure
with an NPS server and a VPN server. And the NPS server,
if you recall, the critical points there are just to make sure that we get
our certificates enrolled correctly and automatically, because we want
those to renew. And then configuring the policy,
pay careful attention to some of those advanced settings in terms of security,
disabling fast reconnect, enable support for crypto binding, and those
types of things. On the VPN server, you saw how easy it was to install
and configure that, especially using PowerShell. If you feel like using
the GUI, knock yourself out.
PowerShell is your friend here, though; it's going to simplify your
life a great deal and save you a lot of time.
And in terms of the VPN server,
just ensure that you pay close attention when you're
installing those certificates.
The certificate request process can be rather tedious, and just use caution
there and make sure that you dot all your i's, cross all your t's, as it
were, and make sure that all of those certificates are enrolled successfully.
And then finally, you saw that using my Always On VPN Tools PowerShell module
can greatly simplify the task of performing some of those fine‑tuning and
optimization tasks, you know,
defining our IPsec policy and our root certificate, configuring
our VPN ports, and those types of things.
Be sure to download that module and look for updates in the future.
I'm always adding features and capabilities to that module as well.
It can really save you some time.
It certainly does for me.
So let's move on to the next module, where we start provisioning our Always On VPN clients.