Solved

VPN connection between cloud server and on-prem domain controller

Posted on 2014-12-23
4
433 Views
Last Modified: 2015-02-01
I'm pretty new to VPN connections, but over the last two weeks I have managed to set up a number of VPN connections to Windows 2003 R2, 2008 R2 & 2012 R2 servers.

Most (except one which had a decent Cisco gateway with a PPTP server capability) have been using the standard Windows Server RRAS configuration with PPTP and "dial-in" permissions for the various user accounts.
The most recent VPN I configured is to an Amazon EC2 server and it is the first one I have done using SSTP and a security certificate.
I can connect OK and our applications are working OK, but I'm to the point where testing for this server is about to go to production.  There is one site which will be connecting with 5 or more users... so I was wondering if there was a way to create the VPN tunnel between the two servers rather than having each user in the office "dial-in"?

The AWS server's private IP is 172.32.3.23 and the on-prem DC server's private IP range is 192.168.1.0/24.  The application we use needs the client side to connect to the server side using the server's IP (in this case the AWS server).  This is why the "dial-in" works great because with DHCP enabled for a reserved range, the computers connecting to the AWS server are being given an IP in the same subnet as the AWS server - and therefore the application works fine.

If the answer to my above question is yes, how do I achieve this?  Especially when each on-prem client computer will need to be able to point to the private side of the AWS cloud server for the application to work.

A side note if it will help:-  the on-prem network has a CyberRoam VPN device (that was once used for a previous remote office).
0
Comment
Question by:Reece Dodds
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
4 Comments
 
LVL 27

Accepted Solution

by:
Steve earned 500 total points
ID: 40521608
what you need is known as a site-to-site VPN, instead of a per-user VPN.

This means that your default gateway (router, firewall or server) is aware of the link and send traffic to the cloud server's subnet automatically without the individual users/PCs having to do anything.

This link seems to mention setting up VPNs but I've not done much with Amazon's hosted systems so best to check with them. You'll need a device at your end that can support the VPN (router or server)

http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_VPN.html#Examples
0
 
LVL 7

Author Comment

by:Reece Dodds
ID: 40550124
Will any changes need to be made to the AWS server's SSTP configuration?
0
 
LVL 27

Assisted Solution

by:Steve
Steve earned 500 total points
ID: 40553927
depends on your account as to whetheryou have the facility available, but I believe it's pretty much pre-configured if it's there.
Best to ask the AWS guys who look after your account.
0
 
LVL 7

Author Comment

by:Reece Dodds
ID: 40583116
Will do.  Thanks for your help
0

Featured Post

Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

OfficeMate Freezes on login or does not load after login credentials are input.
For many of us, the  holiday season kindles the natural urge to give back to our friends, family members and communities. While it's easy for friends to notice the impact of such deeds, understanding the contributions of businesses and enterprises i…
In this Micro Tutorial viewers will learn how to use Windows Server Backup to create full image of their system. Tutorial shows how to install Windows Server Backup Feature on Windows 2012R2 and how to configure scheduled Bare Metal Recovery backup.…
Viewers will learn how to connect to a wireless network using the network security key. They will also learn how to access the IP address and DNS server for connections that must be done manually. After setting up a router, find the network security…

752 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question