Configure the RRAS Multitenant Gateway VM for VLANs
Updated: June 7, 2016
You can use this topic to configure the virtual machine (VM) named MTCloudGW on the Hyper-V Multitenant Gateway host.
This topic contains the following sections.
Important
The Windows PowerShell scripts that are provided in this topic must be run from within the VM named MTCloudGW. Do not run these scripts on the Hyper-V host. In addition, you must replace variable values in the script with values that are appropriate for your deployment.
To configure the MTCloudGW VM
On the HNV host, open Hyper-V Manager, and then double-click the VM named MTCloudGW. The VM opens in a new window. Start the VM.
During the operating system installation on the VM, create an Administrator password and provide other information as required.
After operating system installation is complete, log on to the VM.
Rename the computer and restart the VM by running the following Windows PowerShell commands.
Rename-Computer MTCloudGW Restart-Computer
After the computer is restarted, log on to the VM.
Copy the RRAS installation Windows PowerShell script below to the VM.
On the VM, open Windows PowerShell with Administrator privileges. Run the script by typing the folder location and file name of the script. For example, if the file name of the script is RRASinstall.ps1 and the folder location is C:\Users\Administrator\Documents, type C:\Users\Administrator\Documents\ RRASinstall.ps1, and then press ENTER.
Copy the MTGW Configuration Windows PowerShell script below to the VM.
On the VM, open Windows PowerShell with Administrator privileges. Run the script by typing the folder location and file name of the script. For example, if the file name of the script is MTGWConfig.ps1 and the folder location is C:\Users\Administrator\Documents, type C:\Users\Administrator\Documents\ MTGWConfig.ps1, and then press ENTER.
RRAS installation Windows PowerShell script
Following is the full script that you can run on the VM MTCloudGW. This script installs RRAS on the MTGW VM.
Important
This installation script specifies the Remote Access features for each tenant by using the Enable-RemoteAccessRoutingDomain command. The –Type parameter specifies the remote access features that are allowed for the tenant. Following are the possible values you can use for this parameter. Vpn. If you specify this value, the Multitenant Gateway is configured to allow the tenant to connect to datacenter resources with a VPN dial-in connection. If you select this option, you must design and implement a solution to authorize and authenticate VPN connection requests. VpnS2S. If you specify this value, the Multitenant Gateway is configured to allow the tenant to establish site-to-site VPN connections between the tenant resources in your datacenter and their remote sites across the Internet. In addition, the Multitenant Gateway can be configured with Border Gateway Protocol (BGP). All. If you specify this value, the Multitenant Gateway is configured to allow the tenant to use the gateway for site-to-site VPN connections, to allow configuration of BGP, and to allow dial-in VPN connections.
##### Macros for RRAS Configuration on MTCloudGW VM #####
$Contoso_RoutingDomain = "ContosoTenant"
$Contoso_IPv4Range = "11.11.11.1, 11.11.11.200"
$Fabrikam_RoutingDomain = "FabrikamTenant"
$Fabrikam_IPv4Range = "11.11.11.1, 11.11.11.200"
##### Install S2S VPN on MTCloudGW #####
Add-WindowsFeature -Name RemoteAccess -IncludeAllSubFeature -IncludeManagementTools
ipmo remoteaccess
#Install-RemoteAccess
Install-RemoteAccess -MultiTenancy
Enable-RemoteAccessRoutingDomain -Name $Contoso_RoutingDomain -Type All -PassThru
Enable-RemoteAccessRoutingDomain -Name $Fabrikam_RoutingDomain -Type All -PassThru
Set-RemoteAccessRoutingDomain –Name $Contoso_RoutingDomain –IPAddressRange 11.11.11.1, 11.11.11.200 –TenantName “Contoso”
Set-RemoteAccessRoutingDomain –Name $Fabrikam_RoutingDomain –IPAddressRange 11.11.11.1, 11.11.11.200 –TenantName “Fabrikam”
MTGW Configuration Windows PowerShell script
Following is the full script that you can run on the VM MTCloudGW. This script configures the VM with tenant routing information.
##### Macros for MT Cloud GW VM #####
$Contoso_CloudGW_Address = "10.0.2.2"
$Fabrikam_CloudGW_Address = "10.0.2.2"
$Contoso_CloudVM_Subnet = "10.0.1.0/24"
$Fabrikam_CloudVM_Subnet = "10.0.1.0/24"
$Contoso_CloudVM_NextHop = "10.0.2.1"
$Fabrikam_CloudVM_NextHop = "10.0.2.1"
##### Configure Cloud GW VM #####
New-NetIPAddress $Contoso_CloudGW_Address -InterfaceAlias "ContosoGWSubnet"
New-NetIPAddress $Fabrikam_CloudGW_Address -InterfaceAlias "FabrikamGWSubnet"
New-NetRoute -InterfaceAlias "ContosoGWSubnet" -AddressFamily IPv4 -DestinationPrefix $Contoso_CloudVM_Subnet -NextHop $Contoso_CloudVM_NextHop
New-NetRoute -InterfaceAlias "FabrikamGWSubnet" -AddressFamily IPv4 -DestinationPrefix $Fabrikam_CloudVM_Subnet -NextHop $Fabrikam_CloudVM_NextHop
## End Cloud GW VM Config ##
You can also perform the additional steps of configuring Site-to-Site VPN connections, Network Address Translation (NAT), and configuring the gateway as a Border Gateway Protocol (BGP) router. For more information, see the following sections.
Configure the RRAS Multitenant Gateway for Site-to-Site VPN Connections
Configure the RRAS Multitenant Gateway to Perform Network Address Translation for Tenant Computers
Configure the RRAS Multitenant Gateway for Dynamic Routing with BGP
Windows PowerShell command reference links
The scripts in this topic use the following Windows PowerShell commands. Click a link to open the help topic for the command.