Hello every one

I Have a Domain in VM in my on primises and need to domain join a VM present in azure for that purpose I want to setup a site to site VPN .

For this I deploy other VM in my on primises and install "direct access"  role from the server manager which act as a router but I am not find the way how to provide the public IP to this router so that it connect to the Azure also I have aconfussion wheather the router need to domain join or just in a network only. I used Server 2012 R2 OS.

any body suggest me.

Regards

Sunny Burman

• Edited by Sunny Burman Thursday, May 14, 2015 10:14 AM

Hi  Sunny,

To implement VPN, we need to install the roles of Direct Access and VPN and Routing.

Then, open Routing and Remote Access console in Tools. Right click on the server and click Configure and Enable Routing and Remote Access. We could configure VPN in the wizard.

Here is the guide for configuring VPN on Azure:

Step-By-Step: Create a Site-to-Site VPN between your network and Azure:

http://blogs.technet.com/b/canitpro/archive/2013/10/09/step-by-step-create-a-site-to-site-vpn-between-your-network-and-azure.aspx

Here is the guide for site-to-site VPN:

Step-by-Step Guide for Setting Up a PPTP-based Site-to-Site VPN Connection in a Test Lab:

https://technet.microsoft.com/en-us/library/cc758271(WS.10).aspx

Best Regards,

Leo

Hello Leo

your reply is very much usefull and I understand the steps also but I have a bit of doubt that are we domain join the router machine if not how can we provide the Static IP to the internal network because when we provide the static IP to the router machine it will show undefined Network and when we domain join the Router machine it will show in the internal network .

till Now I do not provide the external network I need to first resolve the internal network problem.

Regards

Sunny 

Hi Sunny,

To provide IP address to internal network, we could DHCP service.

Here is the guide for configuring DHCP:
DHCP server role: Configuring a DHCP server:
https://technet.microsoft.com/en-us/library/cc756865(v=ws.10).aspx

The router doesn't need to join domain.

Best Regards,

Leo

Hello Leo Please read the marked line .

Regards

Sunny

Hi Sunny,

I'm afraid there was some misunderstanding.

NLA service uses default gateway, not subnet mask.

Best Regards,

Leo

Sorry for that

The gatway of both is 192.168.10.1

IP of DC is 192.168.10.2 and the Router is 192.168.10.5 .

Where DHCP Range is 192.168.10.1 to 192.168.10.254

Regards

Sunny

• Edited by Sunny Burman 21 hours 59 minutes ago

Hi Sunny,

According to your description, I suppose you configured two gateways for the router. Am I right?

If yes, it may cause some issues.

Multiple Default Gateways Can Cause Connectivity Problems:
https://support.microsoft.com/en-us/kb/159168

When the device joined domain and it could connect to DC, the network would become private and can't be changed. If not joined domain and it could connect to Internet, it would become public and we could change it manually.

Best Regards,

Leo

hi Leo

I had created only one Gatway that is their IP is 192.168.10.1 .

Regards

Sunny

Hi Sunny,

As I mentioned, if the server has not joined domain and it could connect to Internet, it would become public and we could change it manually.

When it shows undefined network, we may check if it could connect Internet.

Best Regards,

Leo