Enable RRAS LAN Routing via Powershell

On a fresh install of windows 2012 R2 if I run the following:
Install-WindowsFeature -Name "Routing"
Install-WindowsFeature -Name "RSAT-RemoteAccess-Powershell"
Add-BgpRouter ...
I receive the error: LAN Routing not configured. Please ensure RasRoutingProtocols role services is installed and Lan Routing is configured.
This is expected and via the GUI I can enable RRAS and LAN routing. How can I enable RRAS and LAN routing with powershell only?

This link may help you
https://social.technet.microsoft.com/Forums/windowsserver/en-US/5f98fa02-f960-4e51-bacf-b1c84a45dd40/rras-server-2012-core-how-to-enable-lan-routing
Regards Chen V [MCTS SharePoint 2010]

Similar Messages

Server2003, enable / disable user login via powershell

Hi all,
Newbie, in Africa for short time only and probably haven't done all the homework I should have.
Unix and OO background but just learning powershell.
I need to be able to enable / disable local user accounts on a local server in a school; no clusters, pretty much stand-alone. I presume if I can get the user object it has a member / method for enabling / disabling, but I don't understand how to get
the user object. In particular, I don't understand the two-character abbreviations used in front of params to queries.
If I bring up active directory users and computers, what I see is:
techna-school
Tech/na school
      Students
The users I want to enable/disable are members of the "Students" group above, and for RDP / security purposes are members of the "Learners" group. The server is not in any "official" (i.e. DNS recognized) domain, just gets
net access as a normal user via dialup and DHCP.
I'm guessing I need something kinda like the following to get at the user objects, but I haven't a clue what the "ou", "dc", or anything else needed are supposed to be as I don't have an MS server background.
$learners = [ADSI] "LDAP://ou=Learners,dc=techna-school"
Any help would be much appreciated.
Thanks,
Gary

From the sounds of it, you have domain accounts not local accounts. The difference is domain accounts can log onto any machine within your domain, whereas local accounts can only log onto the local machine they where created on. Since your users are using
thin clients, it is most liekly a domain account they are using.
For using AD cmdlets on Server 2003, you need some things in place, this article might help you
Thanks for the info and pointer.
I'm a little leery of going through that process as I don't have a test system to work on, but I appreciate the pointer; may delve into that later.
In the meantime, I've managed to get the user objects using Get-WmiObject, but an attempt to modify them via Set-WmiInstance fails:
    $learners = Get-WmiObject -query "Select Name,Disabled From Win32_UserAccount"
    foreach ($learner in $learners) {
    Set-WmiInstance -InputObject $learner -Argument @{Disabled=$True} -PutType UpdateOnly
Set-WmiInstance : Invalid Object
Seems pretty straight-forward so I suspect it is a simple error but I'm not seeing it.

RRAS - Server 2012 Core - How to enable 'LAN Routing'

Hi,
how can i enable 'LAN Routing' on a Server core with RRAS Role installed via command line?
In GUI it's just 'Enable' -> Custom -> LAN-Routing. How can i do the same via command line (powershell or cmd)?
Thank you!

Ok, solved it myself. (Don't know why i always solve a Problem as soon as i make a post in Forums ;D)
Set-NetIPInterface -Forwarding Enabled
so for enable Forwarding on all Adapters:
Get-NetAdapter | Set-NetIPInterface -Forwarding Enabled

Enable Lan Routing Windows Server 2012

Hi!
I'm trying to setup the RRAS in a Windows server 2012 to route between my two networks. I have a windows server 2012 with two nics and the RRAS installed. I installed "Lan Routing" custom option.
My configuration is:
Server nic1 - 192.168.1.254 255.255.255.0 (no dfgateway)
Server nic2 - 192.168.103.54 255.255.255.0 (no dfgateway)
Clients subnet1 - 192.168.1.x 255.255.255.0 192.168.1.254
Clients subnet2- 192.168.103.x 255.255.255.0 192.168.103.54
The problem is that from a client of subnet1 i can ping 192.168.1.254 and 192.168.103.54 but i can't ping clients of subnet2, and backwards the same problem.
Thanks.

Your client machines need to know how to find the route to the other subnet.
1) So on a client on subnet 1, open a Command Prompt and type:
route add -p 192.168.103.0 mask 255.255.255.0 192.168.1.254
This adds a permanent route which tells the client to go to 192.168.1.254 to find network 192.168.103.0
2) On the clients on subnet2 you would type:
route add -p 192.168.1.0 mask 255.255.255.0 192.168.103.54
Make sure the clients have the appropriate server NIC address as their default gateway and DNS.
For example, for clients on subnet1:
IP: 192.168.1.x
Gateway: 192.168.1.254
DNS: 192.168.1.254
That is misleading at best. The original post is a straight forward example of subnet to subnet routing. No additional routes are required because the default routing is quite adequate. If you look at the addresses of the static routes you provide
you will see that they are the same as the default addresses already set (so they are redundant).
Ping is not a reliable test of connectivity any more. Built-in firewalls will block it by default. You will need to temporarily disable the firewalls of the clients to test with ping (unless you enable ICMP echo in both directions on all clients).
Bill

Transparent Tunneling and Local Lan Access via VPN Client

Remote users using Cisco VPN 4.2 connect successfully to a Cisco Pix 515 (ver. 6.3). The client is configured to allow Transparent Tunneling and Local Lan access, but once connected to the Pix, these two options are disabled. What configuration changes are required on the Pix to enable these options? Any assistance will be greatly appreciated.
Mike Bowyer

Hi Mike,
"Transparent Tunneling" and "Local Lan Access" are two different things. "Transparent Tunneling" is dealing with establishing an IPSec Tunnel even if a NAT device is between your client and the VPN-Headend-Device. "Local LAN Access" is dealing with access to devices in the LAN your VPN-Client-Device is connected to.
What do you mean exactly with "disabled once the connection is made" ?
You can check the local LAN Access by having a look at the Route-Table of the VPN-Client:
Right Click the yellow VPN-lock Icon in System-Tray while the VPN-Connection is active and select "Statistics ...". Have a look at the second register page "route details".
Are any local LAN routes displayed when your are connected ?
And - always remember two important restrictions the Online Help of the VPN-Client is mentioning:
1: This feature works only on one NIC card, the same NIC card as the tunnel.
2: While connected, you cannot print or browse the local LAN by name; when disconnected, you can print and browse by name.
Carsten
PS: Removing Split Tunnel won't enable local LAN access as all traffic would be sent into the IPSec tunnel.

[Forum FAQ] How to install and configure Windows Server Essentials Experience role on Windows Server 2012 R2 Standard via PowerShell locally and remotely

As we all know,
the Windows Server Essentials Experience role is available in Windows Server 2012 R2 Standard and Windows Server 2012 R2 Datacenter. We can add the Windows Server
Essentials Experience role in Server Manager or via Windows PowerShell.
In this article, we introduce the steps to install and configure Windows
Server Essentials Experience role on Windows Server 2012 R2 Standard via PowerShell locally and remotely. For better analyze, we divide this article into two parts.
Before installing the Windows Server Essentials Experience Role, please use
Get-WindowsFeature
PowerShell cmdlet to ensure the Windows Server Essentials Experience (ServerEssentialsRole) is available. (Figure 1)
Figure 1.
Part 1: Install Windows Server Essentials Experience role locally
Add Windows Server Essentials Experience role
Run Windows PowerShell as administrator, then type
Add-WindowsFeature ServerEssentialsRole cmdlet to install Windows Server Essentials Experience role. (Figure 2)
Figure 2.
Note: It is necessary to configure Windows Server Essentials Experience (Post-deployment Configuration). Otherwise, you will encounter following issue when opening Dashboard.
(Figure 3)
Figure 3.
2. Configure Windows Server Essentials Experience role
(1) In an existing domain environment
Firstly, please join the Windows Server 2012 R2 Standard computer to the existing domain through the path:
Control Panel\System\Change Settings\”Change…”\Member of. (Figure 4)
Figure 4.
After that, please install Windows Server Essentials Experience role as original description. After installation completed, please use the following command to configure Windows
Server Essentials:
Start-WssConfigurationService –Credential <Your Credential>
Note: The type of
Your Credential should be as: Domain-Name\Domain-User-Account.
You must be a member of the Enterprise Admin group and Domain Admin group in Active Directory when using the command above to configure Windows Server Essentials. (Figure 5)
Figure 5.
Next, you can type the password for the domain account. (Figure 6)
Figure 6.
After setting the credential, please type “Y” to continue to configure Windows Server Essentials. (Figure 7)
Figure 7.
By the way, you can use
Get-WssConfigurationStatus
PowerShell cmdlet to
get the status of the configuration of Windows Server Essentials. Specify the
ShowProgress parameter to view a progress indicator. (Figure 8)
Figure 8.
(2) In a non-domain environment
Open PowerShell (Run as Administrator) on the Windows Server 2012 R2 Standard and type following PowerShell cmdlets: (Figure 9)
Start-WssConfigurationService -CompanyName "xxx" -DNSName "xxx" -NetBiosName "xxx" -ComputerName "xxx” –NewAdminCredential $cred
Figure 9.
After you type the commands above and click Enter, you can create a new administrator credential. (Figure 10)
After creating the new administrator credential, please type “Y” to continue to configure Windows Server Essentials. (Figure 11)
After a reboot, all the configurations will be completed and you can open the Windows Server Essentials Dashboard without any errors. (Figure 12)
Figure 12.
Please click to vote if the post helps you. This can be beneficial to other community members reading the thread.

Part 2: Install and configure Windows Server Essentials Experience role remotely
In an existing domain environment
In an existing domain environment, please use following command to provide credential and then add Server Essentials Role: (Figure 13)
Add-WindowsFeature -Name ServerEssentialsRole
-ComputerName xxx -Credential DomainName\DomainAccount
Figure 13.
After you enter the credential, it will start install Windows Server Essentials role on your computer. (Figure 14)
Figure 14.
After the installation completes, it will return the result as below:
Figure 15.
Next, please use the
Enter-PSSession
cmdlet and provide the correct credential to start an interactive session with a remote computer. You can use the commands below:
Enter-PSSession –ComputerName
xxx –Credential DomainName\DomainAccount (Figure 16)
Figure 16.
Then, please configure Server Essentials Role via
Add-WssConfigurationService cmdlet and it also needs to provide correct credential. (Figure 17)
Figure 17.
After your credential is accepted, it will update and prepare your server. (Figure 18)
Figure 18.
After that, please type “Y” to continue to configure Windows Server Essentials. (Figure 19)
Figure 19.
2. In a non-domain environment
In my test environment, I set up two computers running Windows Server 2012 R2 Standard and use Server1 as a target computer. The IP addresses for the two computers are as
below:
Sevrer1: 192.168.1.54
Server2: 192.168.1.53
Run
Enable-PSRemoting –Force on Server1. (Figure 20)
Figure 20.
Since there is no existing domain, it is necessary to add the target computer (Server1) to a TrustedHosts list (maintained by WinRM) on Server 2. We can use following command
to
add the TrustedHosts entry:
Set-Item WSMan:\localhost\Client\TrustedHosts IP-Address
(Figure 21)
Figure 21.
Next, we can use
Enter-PSSession
cmdlet and provide the correct credential to start an interactive session with the remote computer. (Figure 22)
Figure 22.
After that, you can install Windows Server Essentials Experience Role remotely via Add-WindowsFeature ServerEssentialsRole cmdlet. (Figure 23)
Figure 23.
From figure 24, we can see that the installation is completed.
Figure 24.
Then you can use
Start-WssConfigurationService cmdlet to configure Essentials Role and follow the steps in the first part (configure Windows Server Essentials Experience in a non-domain environment) as the steps would be the same.
The figure below shows the status of Windows Server Essentials.
Figure
25.
Finally, we have successfully configured Windows Server Essentials on Server1. (Figure 26)
Figure 26.
More information:
[Forum
FAQ] Introduce Windows Powershell Remoting
Windows Server Essentials Setup Cmdlets
Please click to vote if the post helps you. This can be beneficial to other community members reading the thread.

Satellite Pro L300-12H not getting IP from DHCP router via cable

My Vista Premium SP1 laptop is connected via wireless connection to a Buffalo ADSL modem/router model WBMR-G54 which works fine. However, I tried the other day to connect up the LAN card via RJ45 cable to the router and it won't work! I get the message "limited connectivity" and an IP of 169.254.xxx.xxx which suggests it is not getting an IP from the router.
I been on various web sites and tried all sorts of things like unchecking ipv6 on the LAN card properties, turning off DHCP Broadcast flag in the registry (as per micrsoft issue) etc. but to no avail.
Anybody got any suggestions to get it working?
NB: I took the laptop into work and connected it to the Windows 2003 server network and got a DHCP IP straight away!?!

Hi wakefijr,
To be honest, it's still worth checking with your ISP or the router manufacturer because they will be able to guide you through the settings of the router. You're quite right about the 169.254.xxx.xxx IP address, it means that the DHCP server within the router isn't assigning an IP address to the laptop so the laptop is assigning itself an IP address via APIPA.
Short of checking the DHCP router settings, one other thing you could do is disable APIPA and try using the alternate IP configuration, this is how:
* Go to the *Start Menu* and in the *Start Search* box, type in *ncpa.cpl* and hit Enter, this will open up network connections
* Go into the properties of the LAN and properties of IPv4
* Click on the *Alternate Configuration* tab
* You will see that it is set to APIPA, you can change to *User configured* and input an available IP address, the correct subnet mask (most likely 255.255.255.0) and default gateway.
* Click *OK* as many times as you need to save all changes, then reboot with the RJ45 cable connected.
What this will then do is make the laptop try looking for a DHCP server to assign an IP address, but if no DHCP server is assigning an IP address to this laptop then it will assign one that should work on the network.
But really check router configuration as a priority.

Simple lan to lan routing (not working)

I have created a RRAS LAN only router on windows 2008 R2
segment 1
172.16.0.0        network
172.16.16.20    gateway
255.255.0.0      subnet
segment 2
10.0.0.0        network
10.0.0.1    gateway
255.0.0.0      subnet
RRAS interface A 172.16.16.20
RRAS interface B 10.0.0.1
i installed rip 2 protocol
still client cant ping hosts on the opposite network, any idea what i may be doing wrong ?
regards
Faisal Gillani

route print does not give you any clue?
any VLANs (manage switches) configured on the network?
Every second counts..make use of it. Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.
No no VLAN present
Here is my routing print , this si a VM based windows server which have two nic, each connected to diffrent lan's i have a feeling this is going to be something very basic which i am doing wrong :-)
IPv4 Route Table
===========================================================================
Interface List
0x1 ........................... MS TCP Loopback interface
0x10003 ...00 15 5d 10 10 04 ...... Microsoft Hyper-V Network Adapter #2
0x10004 ...00 15 5d 10 10 03 ...... Microsoft Hyper-V Network Adapter
===========================================================================
===========================================================================
Active Routes:
Network Destination        Netmask          Gateway       Interface Metric
         10.0.0.0        255.0.0.0         10.0.0.1         10.0.0.1     10
         10.0.0.1 255.255.255.255        127.0.0.1        127.0.0.1     10
   10.255.255.255 255.255.255.255         10.0.0.1         10.0.0.1     10
        127.0.0.0        255.0.0.0        127.0.0.1        127.0.0.1      1
       172.16.0.0      255.255.0.0     172.16.16.20     172.16.16.20     10
     172.16.16.20 255.255.255.255        127.0.0.1        127.0.0.1     10
   172.16.255.255 255.255.255.255     172.16.16.20     172.16.16.20     10
        224.0.0.0        240.0.0.0         10.0.0.1         10.0.0.1     10
        224.0.0.0        240.0.0.0     172.16.16.20     172.16.16.20     10
255.255.255.255 255.255.255.255         10.0.0.1         10.0.0.1      1
255.255.255.255 255.255.255.255     172.16.16.20     172.16.16.20      1
===========================================================================
Persistent Routes:
None
thanks in advance :-)

Express to Broadband router via ethernet cable

I need to confirm something. I would like to purchase an Express 802.11n to set up a faster internet connection for my wife's MacBook, it can use the enabler. I have a fast FIOS internet connection (20/10). Can I connect the Express to my broadband router via an ethernet cable and will my wife see the speed difference? I have done a few speed checks and the 802.11g Airport network peaks out at about 7 mps. I expect to see her machine peak at about 15 mps if configured as a 802.11n only network. Is this about right? I would still have to suffer with the slower network, but us men do crazy things for love.
Mark

If your wife's MacBook is connected directly via Ethernet to the FiOS router does it show a connection faster than 7 Mbps? If not, changing the wireless interface isn't going to help anything.
If she does get the full 20 Mbps via Ethernet then switching to 802.11n might getter her a faster wireless data transfer.

Bridging two LAN's via VPN

Recently I became interested in bridging two (or more) LAN's via a VPN in order to boost gaming practicalities. Although I could simply run Hamachi on all the computers, I'd rather have no special software installed on any of the gaming PC's, but simply have one linux machine running on each network with the appropriate VPN software installed to form the bridge.
Each household's LAN setup would be pretty identical; router -> hub/switch -> PC's. That said, there may also be random singular machines also wanting to connect to the VPN, but I'd rather focus on simply bridging the two LAN's to begin with.
I'm guessing such a setup is possible.
What software would I need to achieve this? I've read about FreeS/WAN and OpenVPN, but am not sure what kind of configuration I'm looking for. I've seen the page in ArchWiki, but similarly, don't know if that'll give me what I'm after.
Any help, links, suggestions would be appreciated.
EDIT: I think I've found what I'm after. Will this achieve my goal?[/url]

Abecedarian wrote:EDIT: I think I've found what I'm after. Will this achieve my goal?[/url]
OpenVPN should work fine. Other alternatives include CIPE or OpenSWAN.

Problem for connecting my computer to my wireless router via ethernet cable

I have a wireles router model BEFW11S4. I have three computers connected to the router by wireless. All these connection work well. I have also a computer connected to the same router via an ethernet cable. This connection does not work, I cannot access internet with that computer. What can I do to correct the problem?

First off, you need to ascertain if the network card in the computer that is not working is capable of sending and receiving legitimate packets.
Best thing to do is try and connect this machine directly to your Internet Service Provider modem and see if it works.
If it doesn't, first you need to check if your computer is capable of acquiring an IP address automatically (See below for details).
If it is setup to acquire an IP address automatically, but still does not work you either need to find someone who knows how to test network hardware for you or you could try installing a different network card in your computer.
There are 2 ways a computer can receive an IP address. A typical way is for your router to provide one to the workstation using something called DHCP. The other method requires you to know the exact IP addressing required on your LAN such that your workstation when manually configured with an IP address knows where to send it's packets to get out to the Internet.
To check if the computer that does not work is configured to "automatically" receive an IP address from your router, do the following:
1. click on Start
2. click on Control Panel
3. double-click on Network Connections
4. right single-click on "Local Area Connection"
5. click on Properties
6. Scroll down the list until you see "Internet Protocol (TCPIP)"
and then double-click that item
7. Make sure "Obtain an IP address automatically" and "Obtain DNS server address automatically" are checked.
This setting allows the workstation to send a broadcast message looking for a DHCP server which can assign an IP address to the workstation. Your router typically would have a DHCP server configured for providing IP addresses. The typical home-based routers can be configured to run a DHCP server or not. Chances are that your wireless computers are automatically acquiring an IP address from your router and therefore it should work on Ethernet connections as well.
It is possible for something to be not working inside your router that would prevent the DHCP server from distributing IP addresses only on the Ethernet connections. If this is the case you would have to acquire a new router.
There is more that can be looked at, but this is where you need to start.

How to turn my macbook pro into router via a usb dongle

hello guys,,,
would you please help me in this matter,,,
how could i to turn my macbook pro into router via a usb dongle, in order for my other apple products can have internet connection too.
im connected to the web via vodafone usb dongle.
thank you!

System Preferences>Sharing>Internet Sharing. Your MBP needs to be on all the time and not sleeping.

Is there a way to enable & configure Volume Discounts via the Product Import Spreadsheet? Is there a way to enable more than 2 Quantity Thresholds?

Is there a way to enable & configure Volume Discounts via the Product Import Spreadsheet? Is there a way to enable more than 2 Quantity Thresholds?

Hi Michael,
You can set the thresholds via an import file. The easiest way to do this (and this goes for all importable data, webapps included, 301 redirects and so on) is this:
1. go into the Admin and create a single item, in you case create a test product and set the thresholds
2. export that data - in your case export the product list
3. take a look at how the data looks like in the export file so you can get an idea of how the format should be like in the import file
Unfortunately you cannot set more than 2 thresholds, that is not possible at the moment.
Thanks,
Mihai

Can you add delegate access to a user's calendar or mailbox folder via powershell?

Basically I want to know if you can grant a user delegate access to another user's calendar or meeting room using native powershell commands?
I know you can do this via method 1, listed below, however when you grant permissions in this way and if a user wants to see who has delegate access to their calendar or inbox by going to delegate access in outlook they will not see user's who have access
to their calendar or inbox.
Method 1:
Add-MailboxFolderPermission -Identity "userA:\Calendar" -User UserB -AccessRights editor
The above is a nice and simple way of granting userB EDITOR access to UserA's calendar.
But as stated above as you are using mailboxFolderPermissions and not DelegateAccess, this applies directly to this folder and if userA goes to their delegate access view in Outlook, they will not see that userB has access to their calendar.
I know that you can use the below commands to see a list of user's who have delegate access to you calendar:
Get-Mailbox userA | Get-CalendarProcessing | select resourcedelegates
I am new to powershell and don't know if there is a way of setting delegate access to a user's calendar or inbox/folder via powershell commands, similar to the above.
Any help with this query would be much appreciated!
thanks

Delegate access is simply a combination of folder rights (which you've described) and Send As right, which is conferred by Add-MailboxPermission or Send On Behalf of right, which I'm not sure if you can confer with PowerShell. Set-CalendarProesssing applies
to resource mailboxes like conference rooms, not to user mailboxes.
Update: "Send on Behalf of" is conferred this way:
Set-Mailbox UserMailbox -GrantSendOnBehalfTo UserWhoSends
Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."

How to Add Multiple Driver Packages Using Reference File via PowerShell

Hey All -
I've got a task I'm working on which would be much easier via PowerShell. I tried figuring it out, but couldn't so thought I'd post.
The Task
I need to create about 50 new, empty driver packages (most are in the same folder in the console) and am trying to find a method of doing so where I may use a source text file / csv file as reference in the command line. Each package has a unique name
and source path. Here are examples:
- Latitude E5440 Win7 x86 [A01] \\server\drivers\5440x86
- Latitude E5440 Win7 x64 [A01] \\server\drivers\5440x64
The Structure
All of the ones I want to add via PowerShell will go into the same folder in the console. They will be in the folder "root\New Drivers\Dell CAB Drivers"
Any ideas or will this just take more time than it's worth for 50? Thanks!
Ben K.

Also, the creation of the driver package won't be your biggest challenge, as it's as simple as New-CMDriverPackage (see:
http://technet.microsoft.com/en-us/library/jj821724(v=sc.20).aspx).
The biggest challenge is relating your models to a share name (unless they're all Latitude).
My Blog: http://www.petervanderwoude.nl/
Follow me on twitter: pvanderwoude

Enable RRAS LAN Routing via Powershell

Similar Messages

Maybe you are looking for