#VPN BY PRIVATE INTERNET ACCESS 1.3.3 HOW TO#

This section explains how to plan for your network, including:ġ.1.1 Plan network adapters and IP addressing Plan for your domain controllers, your Active Directory requirements, client authentication, and multiple domains.ĭecide what GPOs are required in your organization and how to create or edit the GPOs.

#VPN BY PRIVATE INTERNET ACCESS 1.3.3 UPDATE#

Plan for management servers (such as update servers) that are used during remote client management.ġ.7 Plan Active Directory Domain Services You can remotely manage DirectAccess client computers that are located outside the corporate network on the Internet. Decide where to place the network location server website in your organization (on the DirectAccess server or an alternate server), and plan the certificate requirements if the network location server is located on the DirectAccess server. The network location server is used by DirectAccess clients to determine whether they are located on the internal network. Plan Domain Name System (DNS) settings for the DirectAccess server, infrastructure servers, local name resolution options, and client connectivity. Decide whether to authenticate to the IP-HTTPS server by using a certificate that is issued by a certification authority (CA), or by using a self-signed certificate that is issued automatically by the DirectAccess server. IP-HTTPS is a transition protocol that is used by DirectAccess clients to tunnel IPv6 traffic over IPv4 networks. Plan for allowing DirectAccess traffic through edge firewalls.ĭecide whether you want to use Kerberos or certificates for client authentication, and plan your website certificates.

Taskĭecide where to place the DirectAccess server (at the edge, or behind a Network Address Translation (NAT) device or firewall), and plan IP addressing, routing, and force tunneling. These planning tasks do not need to be completed in a specific order. This topic describes the infrastructure planning steps. The first step of planning for an advanced DirectAccess deployment on a single server is to plan the infrastructure that is required for the deployment. Applies to: Windows Server 2022, Windows Server 2019, Windows Server 2016

Vpn by private internet access 1.3.3