Objective Domain 5. Configuring, Securing, and Troubleshooting Remote Access

The Microsoft Windows 2000 platform greatly extended Routing and Remote Access from earlier Microsoft platforms. Most companies will benefit from having IT personnel who are capable of configuring and troubleshooting remote access and virtual private network (VPN) connections. Because the Routing and Remote Access service is disabled by default, you need to enable it in the Routing and Remote Access management console by right-clicking your server in the console tree and then clicking Configure And Enable Routing And Remote Access. This invokes the Routing and Remote Access Server Setup Wizard and presents you with these preconfigured server options, each of which requires specific hardware configurations to support the type of server being configured:

• An Internet Connection Server enables clients on the internal network to access the Internet without exposing internal Internet Protocol (IP) addresses using either Internet Connection Sharing (ICS) or a Windows 2000 network router with the Network Address Translation (NAT) routing protocol.

• A Remote Access Service (RAS) server provides direct dial-in access to the internal network for external clients.

• A VPN server provides indirect access to the internal network for external clients through the Internet.

• A network router enables clients on the internal network to access external networks, passing IP packets unaltered from clients on the internal network to external networks, including the Internet.