How exactly are VPN servers supposed to run? With that i mean when you install the "Remote access" role and install only the VPN server ( without Direct access) on Windows server 2012 R2.

For instance, i have a network  with a DMZ and private network (managed by a firewall), and i want all PCs from private network to be avaible over VPN to the external network, so what i do is set a VPN server on the DMZ network and connect every PC from the private network over VPN with the VPN server, and then when a external client connects over VPN to the VPN server, then that external client has access to all the PCs from the private network over the VPN netwprk.

Is that how it is supposed to work, or did i miss the point?

Hi Tomislav,

As far as I know, and from my test, if external clients and internal connected VPN, they would be able to access each other using the IP address of VPN connection.

Besides, the firewall on client should be configured not to block the traffic.

Best Regards,

Leo