LAB 10 CONFIGURING VPN AND ROUTING

Transcription

1 LAB 10 CONFIGURING VPN AND ROUTING THIS LAB CONTAINS THE FOLLOWING EXERCISES AND ACTIVITIES: Exercise 10.1 Exercise 10.2 Exercise 10.3 Exercise 10.4 Exercise 10.5 Exercise 10.6 Lab Challenge Installing and Configuring RRAS Configuring a VPN Server Configuring a VPN Client Configuring Split Tunneling Configuring Routing Resetting Servers Using the Route Command Exercise 10.1 Installing and Configuring RRAS To configure standard VPN connections, you use Routing and Remote Access Server. You install Routing and Remote Access Server on Server01. The Routing and Remote Access Server can perform Remote Access (dialup and VPN), NAT, and Routing. 15 minutes

2 13. Take a screen shot of the Remote Access Installation progress page by pressing Alt+Prt Scr and then paste it into your Lab10_worksheet file in the page provided by pressing Ctrl+V. 1 You have a user who will be giving demonstrations of your company products while traveling to the customer sites. For the demonstrations to work, the user will need to access the corporate servers and files. What should you install and configure? Routing and remote access with vpn.

3 Exercise 10.2 Configuring a VPN Server Server01 will be the primary application server, which will be used for most applications. The types of VPN connections that are supported by Routing and Remote Access Server include PPTP, L2TP, IKEv2, and SSTP 30 minutes 23. Take a screen shot of the Routing and Remote Access window by pressing Alt+Prt Scr and then paste it into your Lab10_worksheet file in the page provided by pressing Ctrl+V. 2 Which tab would you use to specify a preshared key for RRAS? Security

4 3 Which VPN method requires a digital ceritificate to provide a SSL connection? SSTP 4 By default, how many IKEv2 connections are available? What is the default setting for Network Access Permission? Control access through NPS Policy 40. Take a screen shot of the Administrator Properties dialog box by pressing Alt+Prt Scr and then paste it into your Lab10_worksheet file in the page provided by pressing Ctrl+V.

5 Exercise 10.3 Configuring a VPN Client Now that you have configured the VPN server, you need to configure a client to connect to the VPN server. During this exercise, you use Server02 to act as a VPN client. To connect to a VPN connection using the built-in tools that comes with Windows 8, you have to use the Network and Sharing Center to create a new workplace connection. 30 minutes 16. Take a screen shot of the Networks pane showing a successful connection by pressing Alt+Prt Scr and then paste it into your Lab10_worksheet file in the page provided by pressing Ctrl+V.

6 6 What error message did you get? I did not get a error message 7 What error message did you get? I did not get a error message 8 Besides using the built-in networking tools found in Windows, what can you use to create an executable that will automatically create a VPN client to connect to a particular server or address? All different kinds of servers and services such as sonicwall. Exercise 10.4 Configuring Split Tunneling During this exercise, you take the current VPN connection that you created in Exercise 10.3, and enable split tunneling, so that corporate traffic will go through the Internet and Internet traffic will go out the local Internet connection. By using split tunneling, Internet traffic does not go through the corporate network and the corporate firewalls and proxy servers. As a result, traffic is not filtered, which might allow malware into the corporate network if the client computer is infected with the malware. 5 minutes 7. Take a screen shot of the Advanced TCP/IP Settings dialog box by pressing Alt+Prt Scr and then paste it into your Lab10_worksheet file in the page provided by pressing Ctrl+V.

7 9 You have an executuve who needs to download video s. His home Internet connection is faster than the corporate network. Therefore, when he is at home, he would like to download the video s using this Internet connection when connected to the corporate office through a VPN connection. What can you do? Setup split tunneling. It will send traffic that is destined for the corporate network over the tunnel and send the video through the regular unencrypted internet. Exercise 10.5 Configuring Routing During this exercise, you configure one of the more basic routing protocols to Server01. The only dynamic routing protocol that is available with Windows

8 Server 2012 is Routing Information Protocol (RIP). Although RIP requires almost no configuration after installation, it has a limit of 15 hops. Anything that is more than 15 hops is considered unreachable. 20 minutes 10 Did the ping succeed? No. 11 Did the ping succeed? yes Exercise 10.6 Resetting Servers Before you can continue to the next exercise, you need to disable Routing and Remote Access. If you no longer need to have remote access, VPN, or NAT available on a Windows server, you can disable Routing and Remote Access. 5 minutes LAB REVIEW QUESTIONS 10 minutes 1. In Exercise 10.2, what software included with Windows Server 2012 allows you to create a VPN server used with PPTP and L2TP? Routing and remote access with vpn and directaccess 2. In Exercise 10.2, what program did you use to allow the Administrator to connect using RRAS? Active directory users and computers to set the dial in properties.

9 3. In Exercise 10.3, where do you define VPN connections in Windows Server 2012 when a server needs to act as a VPN client? Network and sharing center. Or network connections. 4. In Exercise 10.4, which option was used to enable or disable split tunneling? Delecting use default gateway on remote network. 5. In Exercise 10.5, what version of RIP does Windows Server 2012 support? RIP V2 Lab Challenge Using the Route Command To complete this challenge, you will demonstrate how to use the Route command. By default, routes are automatically created within Windows. However, you can create static routes by using the route.exe command. 10 minutes Specify the commands that you would use to perform the following tasks? 1. What command would you to display the routing table in Windows? Route print 2. What command would you to create a route to the x (mask ) that goes out the router? Route add What option makes a static router permanent so that the route will remain after a computer is rebooted? -p 4. What command would use to delete the route defined in 2? Rotue delete End of lab. You can log off or start a different lab. If you want to restart this lab, you ll need to click the End Lab button in order for the lab to be reset.