Routing and Remote Access (RRAS) in Windows Server 2003

Have you tested what's new in Windows Server 2003 RRAS?

Best Practice (Litmus Test)

Professionals: Investigate Routing and RAS

Amateurs:  Do not realise that RAS is installed by default

The fact that Routing and Remote Access is installed by default is an indication of its improved reliability.  While RRAS is installed on Server 2003 and Windows 2000 server, you still need to configure the settings.  There may be times when you need to connect two subnets, RRAS can be your static router.  Once you have run the wizard once, you can right click the server object and configure the properties.

See much more on RRAS here

Group policies are every where in Windows Server 2003 and Windows 2000; they even extend to dial-up connections.  Use the power of the Group Policy to control users' settings when ever they logon.  One of the main benefits of switching the domain from mixed to native mode is that you can use group policies when users dial-in.

My Goal - To get you started with RRAS policies

1. Go to Start \ Programs \Administrative Tools \ Routing and Remote Access

2. Add Server (Local Computer)

3. Run the Wizard (Start with the VPN option if you want to practice)

4. Look for REMOTE ACCESS POLICIES (Start \Help if you are stuck)

N.B.  The default RRAS Policy is to Deny users access.  This a failsafe mechanism so that no-one can access the RAS server until the administrator has configured the server (or knows what they are doing!).

N.B.  To get the most out of your RRAS Policy and Profiles, your domain needs to be in NATIVE mode.

Each Policy has a PROFILE tab this is where you configure how long users can connect to the server, which protocols they use and much more besides.

The Routing side of RRAS

Windows 2000 or Server 2003 servers can act as a software router.  Naturally you need at least two network cards.  Check out the Routing by going to RRAS \ <Server Name> \IP Routing \General and then right click and add the Interface or Routing protocol that you need.

This RRAS console has menus with sub menus so there are many features to evaluate e.g. OSPF, L2TP, NAT.

RAS and DHCP Relay Agent

The Relay Agent is now found inside the \IP Routing \General tab of RRAS, if you are going to set up RRAS you either need to configure a separate scope of IP addresses or else use a DHCP Relay Agent to point to the real DHCP server.

Another of Guy's Litmus Tests - Performance Monitoring

Professionals install ipMonitor
Consequently they can see instantly which servers are short of resources, and which are running smoothly.  

Amateurs
Keep their fingers crossed that the servers have enough memory and disk space.

Free Download of SolarWinds ipMonitor

Train Signal has just released their New Windows Server 2008 Training Course.  As an MCT trainer, I am a huge advocate of Train Signal’s products.  What impresses is me is that they demonstrate everything that they teach and they stay away from traditional 'lecture-style' training.  If you are looking for a complete DETAILED coverage of Windows Server 2008, then I highly recommend that you give this course a try.  I have reviewed their 6 hours plus of videos myself, and I guarantee that you will not be disappointed!

Watch a Windows Server 2008 Training Video Demo.

Sign up to my new Ezine and get a free Best Practice ebook. 

 *