asked on

Always on VPN starter

I am looking to get Always On VPN installed and configured. I have gone through the Microsoft installation guide. I am wondering if anyone had tips/configuration ideas to work with or knows contractors they have utilized who might be useful. Located near Seattle WA.

Adam Brown

It's fairly straightforward when set up through the wizard. Just note that it requires Windows 10 Enterprise or Ultimate to connect. Pro will look like it's connecting, then fail.

Steve Harris

ASKER

@Adam
I thought Pro would work. I know Direct Access would only work with Enterprise versions, which is why we avoided it.

Adam Brown

Pro works for the "User Tunnel," which connects after login (Essentially just creating an automated VPN connection rather than user initiated). "Device Tunnel," which connects at system startup (Which is how Direct Access worked), requires enterprise or education SKUs to function.

Steve Harris

ASKER

Alright, this is interesting info. You also mentioned a setup via a wizard. I havent found a wizard for install. Is it just the RAS server setup?

Right now this is what I am utilizing to walk through.
https://4sysops.com/archives/always-on-vpn-directaccess-for-windows-10

Adam Brown

The wizard is either during the RAS setup or is in the RAS console.

Steve Harris

ASKER

OK, So I know I need to do an NPS, CA and RAS server. Do you think it is logical to have all 3 on one server, or should I VM them out.

Adam Brown

CA is best separated. NPS and RAS can sit on the same box.

Steve Harris

ASKER

Alright so I could use the CA on the DC that I have currently then to avoid multiple CA's?

ASKER CERTIFIED SOLUTION

Adam Brown