Questions about always on VPN and DHCP

Brian S 96 Reputation points
2021-11-10T14:09:43.327+00:00

Hello,

We are trying to replace our DirectAccess server with Always on VPN. However I am running into some trouble trying to set it up.

  1. Is it necessary to set up the DHCP scope for the always on VPN network subnet?

If so,

  1. Does the always-on VPN server need to have an IP address in this subnet or does it just need to be able to access it?
  2. Is it ok to use our firewall as the DHCP server rather than setting it up on a Windows server?

Thank you

Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
5,858 questions
0 comments

3 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Brian S 96 Reputation points
    2021-11-10T14:29:38.917+00:00

    So I believe I found a partial answer to my question. I found where I can set a static IP address pool. However I don't see where to set up the DNS servers or default gateway. Does the VPN server itself take care of all of that?

    148232-capture.png

    0 comments
  2. Dave Patrick 426.1K Reputation points MVP
    2021-11-10T14:42:35.707+00:00

    The vpn clients will inherit DNS addresses from the RRAS server's own connection properties. Since VPN is point-to-point there is no need for a default gateway.

    --please don't forget to upvote and Accept as answer if the reply is helpful--

  3. Georg Matviak 176 Reputation points
    2021-11-12T17:17:37.01+00:00

    Hello BrianS-5907,

    Thank you for your question and for getting in touch. My name is Samuel and I would be more than happy to help you with your query.

    I recommend that you consult the article below, which will comment on the process and migration and what are the requirements for this, I believe it will help to clarify and solve your doubts:

    https://learn.microsoft.com/en-us/windows-server/remote/remote-access/da-always-on-vpn-migration/da-always-on-migration-deploy

    ----------

    --If the answer is helpful, please vote positively and accept the answer--

    Yours sincerely,

    0 comments