Server 2012 with AD

Question

Hello Guys and Girls, my name is Chuck.
I am not a wizard when it comes to Server 2012. I recently acquired a job for a company that needed Active Directory and a VPN. The previous IT guy set up Active Directory already. I couldn't get Server Manager to run, well it was repaired after a few days
by Microsoft support. I was successful in setting up Direct Access and Remote Assistance services. So the clients within the network can actually run VPN. But For clients to connect outside the network I need a global IP address. Here is my dilemma, We have
a Meraki FX firewall that I have set up to run site to site or client, and it sees Active Directory and ask for ip ranges for the VPN.  The server with AD on it is behind the firewall and assigned an internal IP address of 10.80.1.2, the Firewall is fed
with one Static IP address and is assigning DNS. I have one NIC being used by the AD Server. Can I use the second NIC and run a static IP from an existing router and assign a global IP and will it work with the VPN? I am getting confused and looking for
a simple solution for our VPN. I am a mid level Tech on 2012. I could use any help I could get. Thanks, Chuck in San Antonio, Texas

Answer 1

I think you are looking at an elephant through a microscope. Let's back up a bit to understand what exactly you are trying to do.
First, the DC should have DHCP configured to give desktops and laptops IP addresses, not the third party firewall. You have more control over options, and because Secure DNS Dynamic Updates, uses Kerberos, it will work with Windows DNS. Meraki or many
other firewalls do not support secure dynamic DNS updates.
Are you trying to setup DirectAccess for client access, or an old-fashioned VPN server? From your post, I can't figure out which. DirectAccess is a secure connection to a network without VPN, but only Windows 7 and newer supports it. VPN is based on Routing
and Remote Access Service (RRAS). Two different things.
But I *think* you are trying to setup DirectAccess.
Can you elaborate on the following? It looks like you have another site that you setup a VPN so this office is connected to the other one? Or is that assumption incorrect?
"We have a Meraki FX firewall that I have set up to run site to site or client"
If DirectAccess is what you want, and you're trying to get DirectAccess configured, what documentation did you follow? Have you seen the following? Maybe they will help.
Configuring and Implementing DirectAccess with Windows Server 2012 (video how-to)
http://technet.microsoft.com/en-us/video/tdbe13-configuring-and-implementing-directaccess-with-windows-server-2012.aspx
'Real World' Direct Access installation using Windows Server 2012
http://blogs.msdn.com/b/canberrapfe/archive/2012/07/12/simple-direct-access-setup-with-windows-server-2012-rp.aspx
Ace Fekay
MVP, MCT, MCSE 2012, MCITP EA & MCTS Windows 2008/R2, Exchange 2013, 2010 EA & 2007, MCSE & MCSA 2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer
Microsoft MVP - Directory Services
Complete List of Technical Blogs: http://www.delawarecountycomputerconsulting.com/technicalblogs.php
This posting is provided AS-IS with no warranties or guarantees and confers no rights.