Information Technology Reference
In-Depth Information
NOTE
PING ISN'T ENOUGH
When you configure corporate resources for the NCA, choose at least one HTTP resource
type. PING doesn't use IPsec and is not sufficient to correctly detect the connectivity
status.
Click Add to add the resource and return to the NCA page. On this page, you can also
configure the following:
Helpdesk Email Address An email address dedicated to resolving DirectAccess
client problems for remote users.
DirectAccess Connection Name A connection name that users will see on
DirectAccess connected clients for the DirectAccess connection.
Allow DirectAccess Clients To Use Local Name Resolution When enabled,
clients can use the broadcast protocols of NetBIOS over TCP/IP and Link-Local
Multicast Name Resolution (LLMNR) to resolve single-level names when they can't
resolve them through DNS. Local name resolution also needs to be configured on
the Infrastructure Server Setup Wizard for this to work.
9.
10. Click Finish; the DirectAccess Client Setup Wizard closes, and you're back at the main
Configure Remote Access page. Step 1 now shows Edit instead of Configure.
Implementing server requirements
After you complete the client configuration section of Step 1 in the Configure Remote Access
Wizard, the Configure button is enabled on Step 2. You can configure the DirectAccess server
by following these steps:
1. Click the Configure button in Step 2 of the Remote Access Setup pane of the Remote
Access Management console.
On the Network Topology page of the Remote Access Server Setup Wizard, select the
topology that best describes your network. The choices are these:
Edge The DirectAccess server is at the edge of the internal network. The server
has two network adapters, one of which is configured with a public IP address and
is connected to the Internet. The second adapter is connected to the internal pri-
vate network and has a private IP address.
Behind An Edge Device (With Two Network Adapters) The DirectAccess server
is deployed behind an edge firewall or device. The server has two network adapters,
one of which is connected to the perimeter network, and the other is connected
to the internal private network. If the edge device uses NAT, only IP over HTTPS
(IP-HTTPS) is deployed.
Behind An Edge Device (With One Network Adapter) The DirectAccess server
is deployed with a single network adapter that is connected to the internal network.
The edge device does NAT.
2.
 
 
Search WWH ::




Custom Search