There are a few other important things that are missing from the tutorial and needs to be cleared: 1. Fortunately, you can make FREE certificate to make this work. Open IIS, navigate to your server, and click on "Server Certificates". Head to the right menu bar and select "Create a Self-Signed Certificate". Fill the tasks and your certificate is ready to use. 2. To make this work, you have to open the 443 port on both windows and your router's firewall. 3. You have to add a forward lookup zone with the chosen virtual hostname on your DNS server. The one you specified in the IIS binding. But desptite these, this is a great and very well detailed tutorial, it worked for me.
This belong in the same network... What about remote networks wanting access to our VPN server? VPN server must have a Public IP or can i setup my VPN with Port Forwarding...? Newbie here
Hi, Nick i have seen almost every major topic video you created to counter check on our technique and get various thing to keep for us. Thus i found your video very helpful in terms of detail explanation regarding every topic you made for those who are in the filed IT & Acting as Admin somewhere to cope at their end on a quick way. Overall provided info, clear voice and step you created relevant to topic are quite good. Keep providing more tips & tricks. Thanks
Awesome video. All good but we must remember port forwarding is a must. You said no port forwarding needed and that's miss leading. Port 443 need to be forwarded to the web server. Else you will get errors that might get complicated in troubleshooting from error logs or firewall logs. Also. Come on man your client is not even going thru a NAT he is definitely on the same network or Hosted on a VM side by side. 10.0.0.15 server and 10.0.0.25 client. But in general the video is awesome . Nice detailed explanation , hands up thumbs up
Great video thanks. Have you to create the video on how to create the self-signed certificate and show how to do site-site VPN IPsec configuration. Thanks again.
@@NLBSolutions Dear and respected Nlb solution thank you very much for your indepth video on how to configure a VPN server ,just to be on a safe side one question: The last part of configuration (creating a new connection,allowing vpn and so on ) are done on the client side right? And the last one just to sadisfy my curiosity am going to politely ask you are you a dutchman? Thank you once more and keep up the excellent work of spreading the Server 16 knowledge!!! All the best
@NLB Solutions, can the remote Access server be a Hyper-V virtual machine ? the scenario is to have remote users access an internal server which is part of a internal hyper-v network.
Hello,Great Video.I tryed to configure and enable the RRAS but when i type start the service it doesn't start saying that can not find the file specified event id:7024 Any sugestion?
Flipping great tutorial video. I followed it with a Windows Server 2008R2 server, and it was almost exactly the same. Thanks! I too am eagerly wanting to see you do a video about SSL certificates and being your own Certificate Authority in a business.
good video, but will you be able to let us know 1. configuring your router to expose the VPN server from outside ? IP address and port number ? is it IP:443 ? for SSTP ? then 2. does the client need to have a certificate installed? Which cert is that going to be ?
You prolly dont give a shit but does someone know a tool to get back into an Instagram account? I stupidly lost the account password. I love any assistance you can offer me.
@Remy Hendrix i really appreciate your reply. I found the site through google and I'm in the hacking process now. Looks like it's gonna take a while so I will reply here later with my results.
When you connect from a Win10... is it a remote location on a different internet location (different network)? Cos I'm having difficulties connecting from a remote location but connecting locally is not a problem.
Good video. The only thing is that you never set your NPS server when you configured your VPN server in Routing and Remote Access setting section. How your connections to VPN server are being routed to the NPS server if you do not setup Radius Authentication as method under "Security" tab, and leave it as "Windows Authentication." ? Thank you,
I'm getting the error: "The revocation function was unable to check revocation because the revocation server was offline". If I change the client VPN connection type to Automatic, it connects fine, but it uses the WAN Miniport (IKEv2) (VPN2) security protocol.
I really like your videos. You explain the subject really well. I had a PPTP connection and looks like someone has been trying to hack in. Due to that, I setup a SSTP VPN Connection. I have a 3rd Party SSL Certificate. Do I need to open a port on the router to allow SSTP traffic? I did point Port 443 to my server. Without doing it, how will the packets know to which server it should go? I get an error "No connection could be made because the target machine actively refused it.". I checked the Firewall on the server and it allows traffic. Thank you.
Great video thank you. Question: I have high-speed connections both at my home and my office. Yet I can only have 10 mbs connection from home to office VPN. What do you think that I am doing wrong. Thank you.
Hello and thank you for your hard work in research and most important sharing your experience with us, beginners. I have a kindly request. When you right click on your server domain you have there Configure and Enable Routing .... and Disable Routing and Remote.. On my server Standard Edition 2016 are both greyed out. I can't access them to start the configuration. In Services RRAS is running also in server Firewall everything that is remote is Allowed. Is a mistake I installed first Remote Access ? I've searched hard on Google but nothing. Also I can't uninstall Remote Access Management. Many thanks
Your videos are always informative and enjoyable to watch, i did follow all steps as described however when the client connects he get the following error (The certificate's CN name does not match the passed value).
Thanks for the video it is very helpful. Are there any videos that you have created that explains a little bit more on how you did the cert on minute 7:27 please. That is the only thing I am missing and I can not figure it out.
Great video, thanks am trying to do the same thing at home, but I am having difficulties with Certificate enrolment policy. If you can it would be great to have a video on that. Thanks
hi thanx for vids. ,im preparing for my mcsa 70-741 would u recommend this 11 vids to my success in exam?is there any further,for 70-740 i followed ur vids n dumps. anything else would help my exam? any websites like 9tut for ccna? pls give guidance
Hey I have a PPTP connection works fine PC to PC at home network connects no problem with my user name and password.. Using an android phone I get an error unsuccessful? Do you know why it would kick my phone but not my PC of my server I connect to?
Amazing quality videos. Love them. Thanks By the way. Seems like Microsoft doesn't have BGInfo anymore? Can you zip up the one you have or had and link it? Would be highly appreciated! And in Cisco Anyconnect Secure Mobility Client I get Connection Attempt has failed It does find the server, tells me it's insecure and all. But doesn't connect after clicking connect anyways. Is it not supported?
Hi Peeter, thank you for the support. DA is a bit different when it comes to configuring. I already have a video about PPTP but on Windows Server 2012 R2 - ru-vid.com/video/%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE--E1GvdJCoX0.html
I tried everything you did here, even paid for a personal SSL certificate through comodo and it doesn't work for me. I set up my client on my mobile hotspot so I wan't on the same network as my vpn server and it refuses to connect for some reason.
quick question, i have deployed DA&VPN. So now its complete different to this, but from da console i can deploy de corp network client and install this on the workstation machine. the question is i need to add those allowed user to any secgroup? because the secGroup in DA was only for machines (so they are machines on the same domain) but what happen if i got a standalone machine? how can i configur that user to use his home machine on that DA&VPN server? thanks in advance.
i have a problem, we created the certificate but you never installe dit on the client pc. I've tried conecting to the vpn, but it gives ou a certificate error (doensnt even ask for it)
Hi Keith, roaming profiles, ah yes, to be honest I can recall only few successful and proper working implementations on roaming profiles. In general remote desktop roaming profiles can improve the user experience a lot when you have an RDS farm with several terminal servers. Consideration would be if your users have huge local profiles and they try to login to different servers, which can cause a lot of unneeded traffic.
Please i need help. I installed active directory and DNS and i integerated with DNS. When i write nslookup command in cmd it returned local host and ::1 dns instead of domain name and its IP. i tried everything with firewall and i went to the properties of dns server and in the interface i only select the ip but still no use. In the event viewer of DNS its giving error that dns cannot open connection with my static ip plz help.
Whenever i am trying to connect with VPN , I received an error " Unknown host" . How can I fix ? & my DNS is working , checked ipconfig/all and nslookup.
Great Video, keep it up. This is exactly what i need, unfortunately i get an error when trying to configure the vpn server saying "the remote access service could not be started" and my system start working very slow. i dont know if my nics are setup properly. the thing is, im not realy sure how they suposed to be set up. would be great if you could share you thoughts about this with me. im using Hyper V for my virtual servers thank you!
We used this method at work and recently its stopped working giving the error the network connection was aborted by the local machine.Trawled the internet but couldn't find an answer. All the certificates are still good
Thank you Daryl, yes they will be able to. Just remember to allow RDP to their desktop computers and to add them in the Remote Access Users group on them.
can you please explane how to make the NLB Web Server templates...because other wise the guide stops because we dont have that step... :( so we cant click a long with you..
I get this error: You cannot request a certificate at this time because no certificate types are available. If you need a certificate please contact your administrator.
Great video. Can't wait to give this a try. Have you had a chance to create the video on how to create the self-signed certificate? Can you include this link?
Great posting - Thank you I'm having some trouble connecting, so.. Are there any ports that must be opened on the VPN server? My VPN server has 2 nics, one connected to the external firewall and one connected to the internal network. Thanks in advance.
Hello, I've tried this out, but will need some help. I have Windows Server 2016 Virtual Machine (VMware Workstation) and my Host OS is Windows 10. The network between Host and Guest OS is set to NAT. The questions I have are: 1. How to setup my router so that external connections are connected to my VM Guest Machine? Do I need to change network connection to Bridged? 2. Because I've got dynamic IP address from my Internet Provider, so I am using ddns on my router. When i Create Self Signed Certificate, Do i need to create it for that address? If no, which one?
Hi Rajkorule, 1. You can achieve this using NAT or Bridged mode. With NAT you will need to configure your physical router to Forward the VPN traffic to the VMware NAT adapter and then configure the Port Forwarding from the VMware workstation to the server (Virtual Network Editor -> NAT Network -> NAT Settings). 2. The certificate will be configured for your specific hostname, so it should not make any issues.
Is this PC of the remote user in behind the firewall of the corporate too? If the user is outside of the firewall what happens when they connect? Shouldn't there be any more settings for connect to the corporate? Thanks.
Hi Donald, using SSTP connection will go through the corporate firewall over port 443, so you need to have that one open. Usually most firewalls have this already enabled.
I am new to VPNs... How does the WIndows 10 use the VPN? How do I see shared folders in the Win 10 client when connected? Do I see new server icons when I click on network?
I keep getting "Certificate types are not available" .....What am I missing? I went and checked for the templates and that's missing entirely.....any help is much appreciated.
Hi, I have followed your video. The last step you have login to VPN. But how did you create the username and password? Or is that the same user name and password to log in to server?
Hi NLB, after following your awesome clip above i get a error which states: The remote computer refused the network connection. can you point to the right direction to fix this please?
Do I have to port forward my router? Here is my situation: modem>router1>some devices+router2>server(this come from the router 2) I wanna access my server remotely.
Hi there great video. How do you connect to the vpn server outside the network. Also I cannot connect to dc01/rdweb outside my network. But it does work on my server
