1
00:00:02,040 --> 00:00:04,350
So now that we have all of our certificates in place,

2
00:00:04,350 --> 00:00:06,500
we can move on with installing the role.

3
00:00:06,500 --> 00:00:10,940
And here again there's two options, you can do this through the GUI,

4
00:00:10,940 --> 00:00:15,700
or as I like to call it the hard way, or you can do this using PowerShell.

5
00:00:15,700 --> 00:00:19,070
I'm going to demonstrate how to use PowerShell because it's the quickest,

6
00:00:19,070 --> 00:00:22,150
easiest, simplest, most effective way to do this.

7
00:00:22,150 --> 00:00:27,130
Again, if you're a UI commander, knock yourself out.

8
00:00:27,130 --> 00:00:31,200
There's just a lot of clicking that you're going to have to do, with PowerShell,

9
00:00:31,200 --> 00:00:34,870
it is just a handful of commands, literally two or three commands.

10
00:00:34,870 --> 00:00:39,340
So, let's open an elevated PowerShell command window.

11
00:00:39,340 --> 00:00:45,940
We're going to install the Windows Feature again, so Install‑WindowsFeature.

12
00:00:45,940 --> 00:00:53,440
And in this case, the role here is called DirectAccess‑VPN.

13
00:00:53,440 --> 00:00:57,610
And by the way, it is the same role as Server 2012,

14
00:00:57,610 --> 00:01:01,250
2012 R2, 2016, 2019 DirectAccess, it's the same role,

15
00:01:01,250 --> 00:01:03,470
we're just going to configure it a little bit differently.

16
00:01:03,470 --> 00:01:04,390
In this case,

17
00:01:04,390 --> 00:01:12,580
we also want to include our management tools, and we'll

18
00:01:12,580 --> 00:01:21,540
go and click OK and let that run.

19
00:01:21,540 --> 00:01:24,760
And once again for expedience, I've sped that process up.

20
00:01:24,760 --> 00:01:27,150
It usually takes a few minutes to install that role,

21
00:01:27,150 --> 00:01:29,960
but bottom line is the role is installed,

22
00:01:29,960 --> 00:01:31,540
and we're ready to configure it.

23
00:01:31,540 --> 00:01:35,940
Now, once again, there's a couple of different ways to configure the role.

24
00:01:35,940 --> 00:01:39,380
First is the UI, and I'm going to actually show you that a little bit here.

25
00:01:39,380 --> 00:01:41,070
I'm going to discourage it because, again,

26
00:01:41,070 --> 00:01:43,640
we're going to use PowerShell, and you're going to see how much easier it is.

27
00:01:43,640 --> 00:01:44,300
But,

28
00:01:44,300 --> 00:01:48,070
if we go here to the Start menu and find what's known as

29
00:01:48,070 --> 00:01:51,260
the Routing and Remote Access management console, it will

30
00:01:51,260 --> 00:01:56,390
be under Administrative Tools, and scroll down a little bit until we find it.

31
00:01:56,390 --> 00:01:57,870
And by the way, while I'm here,

32
00:01:57,870 --> 00:01:59,580
I'm going to go ahead and pin it to the taskbar because

33
00:01:59,580 --> 00:02:02,040
I'm going to use this quite frequently.

34
00:02:02,040 --> 00:02:05,730
So, I'm going to open up the Routing and Remote Access management console.

35
00:02:05,730 --> 00:02:10,430
And by the way, this differs from the Remote Access Management console,

36
00:02:10,430 --> 00:02:17,140
which I will show you here.

37
00:02:17,140 --> 00:02:21,170
I'm going to pin this to the taskbar now because we're going to use it later,

38
00:02:21,170 --> 00:02:26,480
but this is not the tool that we're going to use to perform our

39
00:02:26,480 --> 00:02:30,330
initial configuration we actually want to use the Routing and

40
00:02:30,330 --> 00:02:31,970
Remote Access management console.

41
00:02:31,970 --> 00:02:33,980
So, there is a wizard here.

42
00:02:33,980 --> 00:02:36,400
So if you were to right‑click on the Server,

43
00:02:36,400 --> 00:02:40,340
you could choose Configure and Enable Routing and Remote Access and walk

44
00:02:40,340 --> 00:02:44,680
through a deployment wizard to set up Always On VPN or to set up the

45
00:02:44,680 --> 00:02:47,540
server to support Always On VPN connections.

46
00:02:47,540 --> 00:02:49,780
However, it's even easier than that.

47
00:02:49,780 --> 00:02:51,720
So I'm going to cancel out of this.

48
00:02:51,720 --> 00:02:53,510
I'm going to go back to the PowerShell,

49
00:02:53,510 --> 00:02:56,850
and we're just going to run one more quick command, and

50
00:02:56,850 --> 00:03:03,940
that command is install‑RemoteAccess.

51
00:03:03,940 --> 00:03:13,340
And then the switch we're going to use is VpnType, and the VpnType is VPN.

52
00:03:13,340 --> 00:03:17,040
And then we're going to add the Legacy switch.

53
00:03:17,040 --> 00:03:26,240
And we'll do PassThru just so we can have a look at it.

54
00:03:26,240 --> 00:03:28,370
And there you have it,

55
00:03:28,370 --> 00:03:30,660
essentially everything that we had would've clicked

56
00:03:30,660 --> 00:03:33,240
through the GUI there for 10 or 15 minutes we've done in

57
00:03:33,240 --> 00:03:35,210
two very quick PowerShell commands.

58
00:03:35,210 --> 00:03:38,510
So you can see that some of the configuration's already been picked up,

59
00:03:38,510 --> 00:03:41,380
it identified our SSL certificate for us already.

60
00:03:41,380 --> 00:03:42,320
Of course,

61
00:03:42,320 --> 00:03:44,820
all of these settings are the default settings, and they're not

62
00:03:44,820 --> 00:03:52,000
going to work for us. We're going to have to go into the UI now and do some additional configuration.