To configure the Routing and Remote Access Server (RRAS) to forward packets over the public interface, after you configure a VPN network:
When you start the Routing and Remote Access utility, you see the following:
Welcome to Routing and Remote Access
Routing and Remote Access provides secure remote access to private networks.
Use Routing and remote access to configure the following:
• A secure connection between two private networks.
• A Virtual Private Network (VPN) gateway.
• A Dial-up remote access server.
• Network address translation (NAT).
• LAN routing.
• A basic firewall.
When you setup the VPN server, the interface that you selected is secured to only accept PPTP or L2TP traffic.
NOTE: See HOW TO: Install and Configure a Virtual Private Network Server in Windows Server 2003.
To configure the VPN server to act as a router:
01. Start / Administrative Tools / Routing and Remote Access.
02. Select your server and use the Action menu to press Configure and Enable Routing and Remote Access.
03. Press Next.
04. Select Custom configuration and press Next.
05. Check the VPN access and LAN routing boxes and press Next.
06. In the Summary of Selections, press Finish.
07. If prompted to start the service, press Yes.
08. In the left-hand pane, under your server, right-click Ports and press Properties.
09. Select WAN Miniport (PPTP) and press Configure.
10. If you do not want to permit PPTP connections, clear the Remote access connections (inbound only) box and press OK.
11. Select WAN Miniport (L2TP) and press Configure.
12. If you do not want to permit L2TP connections, clear the Remote access connections (inbound only) box and press OK.
NOTE: Do NOT clear the Remote access connections (inbound only) box for both PPTP and L2TP as this will cause RRAS to route all packets from the public interface to the private network without applying any filters.
