Information Technology Reference
In-Depth Information
7.
If you selected Virtual Private Network (VPN) Access and NAT, then follow the same
procedure as in step 6, but skip step 6a.
8.
If you selected Secure Connection Between Two Private Networks, then do the following:
a.
Select Yes, the option to enable demand-dial connections.
b.
Select whether you want to use DHCP to provide addresses to remote clients or
whether you want to configure a static pool of addresses. Then click the Next button.
c.
If you chose to use a static pool of addresses, configure them now, and click the
Next button.
d.
Click Finish to complete and exit the wizard.
9.
If you selected Custom Configuration, then do the following:
a.
Select the check box corresponding to VPN Access. Click the Next button.
b.
Click the Finish button to complete and exit the wizard.
After you have completed the preceding steps, the configuration wizard will prompt you
with a Yes/No dialog box to start the service. You should start it at this point.
Using the Registry
You can enable Routing and Remote Access Services by setting the following Registry value:
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteAccess\]
"ConfigurationFlags"=dword:00000001
Note that this Registry value will enable the RRAS service, but it will not actually start it.
You can manually start the service by using the Services Control Panel applet or any other tech-
nique at your disposal.
If you want to enable RRAS to accept incoming connections, then also add the following
Registry entry:
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteAccess\Parameters]
"IcConfigured"=dword:00000001
How It Works
Remote access provides significant benefits to businesses, permitting workers to remain
productive when on the road. If your business plans to deploy remote access, spend some time
planning and testing your implementation before enabling it for end users. Each of the five
options described in step 5 of the “Using a Graphical User Interface” section of this recipe
deserve careful consideration regarding functionality and security. You should take great care
that you do not inadvertently expose your systems to unauthorized access.
Although there are a number of excellent VPN appliance solutions, one that deserves
mention is Microsoft's Internet Security and Acceleration Server (ISA Server). ISA Server takes
control of the Routing and Remote Access Services, so if you use both, take care when making
adjustments in either. We strongly recommend that you use the wizards built into ISA Server
for the initial configuration of a VPN or dial-in server. However, once you are comfortable in
