<div>
<div class="content wysiwyg-content">
Hi,<br />
<br />
My scenario:<br />
<br />
Windows 2008 R2 Standard<br />
1 domain<br />
Exchange 2010 SP2 (around 10 users)<br />
1 NIC enabled<br />
1 public IP<br />
Draytek 2820 (ports open 80 - 443 - 25 - 143 - 995) with VPN enable <br />
<br />
<br />
I would like to enable VPN from server side instead of router in order to allow users to access networks shares and have a seamless authentication process.<br />
<br />
I would appreciate any advise and tutorial on how to achieve this from 2008 R2 box.<br />
Also, do I need to use another public IP and NIC to minimize network traffic?<br />
<br />
Thanks,<br />
Rod
</div>
</div>


Hi,

My scenario:

Windows 2008 R2 Standard
1 domain
Exchange 2010 SP2 (around 10 users)
1 NIC enabled
1 public IP
Draytek 2820 (ports open 80 - 443 - 25 - 143 - 995) with VPN enable 


I would like to enable VPN from server side instead of router in order to allow users to access networks shares and have a seamless authentication process.

I would appreciate any advise and tutorial on how to achieve this from 2008 R2 box.
Also, do I need to use another public IP and NIC to minimize network traffic?

Thanks,
Rod

VPN best practices - Windows 2008 R2

Windows Server 2008 and Windows Server 2008 R2, based on the Microsoft Vista codebase, is the last 32-bit server operating system released by Microsoft. It has a number of versions, including including Foundation, Standard, Enterprise, Datacenter, Web, HPC Server, Itanium and Storage; new features included server core installation and Hyper-V.

Windows Server 2008

A virtual private network (VPN) is a network that uses a public telecommunication infrastructure, such as the Internet, to provide remote offices or travelling users access to a central organizational network securely. VPNs encapsulate data transfers using secure cryptographic methods and other security mechanisms to ensure that only authorized users can access the network and that the data cannot be intercepted.

Remote access may refer to the connection to a data-processing system from a remote location, for example through a virtual private network remote desktop software, terminal emulation, or the activation of features of a business telephone system from outside the business's premises.