Настройка DirectAccess

  • Article

??????? ?????

 

? ???????? ????????? - ????? ??????? ??????????? ????? ??????????. ????? ???????? ????? ????????? ?? ?????? ???? ?????? "?? ????" (?? Microsoft), ???????? ?? ????? ?????? ???????, ??? ?? ????? ??????????? ????? www.microsoft.com/rus/windowsserver2008r2.

 

??? ?????? ??????? ??????? ? IPv6, ?.?. DirectAccess ???????? ?????? ?? IPv6. ????? ???? ????????? ?????????, ? ??????????? ?????, ???????????? IPv4 ???????? ?????????? ????? (? ??? ????? ? ????? IPv4 ????????). ????? ???????????? ??????????? - ????? DirectAccess ?? ????? ???????? ?????? ? ?????? ???????? (Windows 2000 Server ? ??????). ????? ???? ??????? ? ? ???????? ? Windows Server 2003. ?? ???? ???? ????? ????????????? ????????? IPv6. ?????? ????????? IPv6 (??????? ????????? IPv6 ?? ??????? ???? ????? ?? ???? ?????? ? Windows Vista ? Windows Server 2008 ? ??????). ??? ??????????? ????? ?????????? ?????? ????????? portproxy ??? ?????????? NAT-PT. ?????? ?????????? (portproxy) ????????? ???????????? TCP ?????? ?? IPv6 ? ?????????????? ??? ?? IPv4 ???????. ??????, (NAT-PT) ???????? ?? ???????? NAT'a ?????? ??????????? IPv6 ?????? ? IPv4 ? ???????? (???????? ????????? ? Teredo ?? ?????). ?? ? ? ????? ???????????? ????? ?????????? ?????????, ?.?. portproxy ???? ? ?????????????? ? Windows Server 2008, ?? ?????????? ?????? TCP. ??? ?????? ? UDP ???????? ?? ???????. NAT-PT ? Windows ?? ???????????, ??? ??? ???? ???????? ? ??????? ?????????????? ????????????...

???, ???? ?? ???????? ???????????, ????????? ??????? ? ????????? DirectAccess.

 

?????????

 

????? ???? ??????????. ?????? ?????????, ??????????? ????, ????? ????????????? ?????? ??? ??????. ??? ?? ? ???? ?????? ?? ??????? ????? ??????????? ???????????? ? ????? technet.microsoft.com. ????? ???? ?????? ?? ????????? ???? ???????????? ???????? ????? ???????? ???????????. ???? ????? ??????? - ???????? ???????? ???? ??????? ??????????. ?????? ?????????? ??????? ?? technet.microsoft.com.

 

??????????:

1. ?????????? ?????? (DC) ??? ??????????? Windows Server 2008 R2

2. ??????, ???? ??????, ??? ??????????? Windows Server 2008 R2. ????? ?????? R2, ?.?. ?? ?????? ??????? Windows Server DirectAccess ?? ????????. ???? ?????? ????? ??????. ????? ?????????? DA.

3. ?? ? Windows 7 enterprise ??? ultimate.

 

DC ?????? ???? ???????? ??? ?????? (??????????? IPv4 ??????, DNS ? ??.). ???????????? ?????????, ?????? ????????? IPv6. ????? ?? ????? ????????.

????? ?????????? IPv6 ????? FD00:0:0:1::1/64. DNS IPv6 - ::1, ???? IPv6 – FD00:0:0:1::2 (????? ????? ????? ? DA). ????? FD00:0:0:1::1 ???????? unique local ? ???????????? ? ????????????? ?????? ???????????. (???-?? ?? ??????? private IP ??????? ? IPv4, 192.168.0.0, 172.16.0.0, 10.0.0.0). ? ?????? ?????? FD00 - ?????????? ?????, ????? ????? ???? ????? ?????????? ?????.

 

DA ?????? ????? ??? ?????? ??????? ??????????. ???? ????????? ? ?????????? ????, ?????? - ? ???????? ?? ??????. ????? NAT ???????? ?? ?????. ??? ???? ?? ??????????, ???????????? ? ????????, ?????? ???? ????????? ??? ??????? IPv4 ??????. ?????? ?????? ???? ?????????????????.

?? ?????????? ?????????? ??????????? IPv4 ????? ??? ????? ? DC ? DNS-??????? ??????????? = ????? ?????? (? ???? ??????? ????? contoso.com), ? ????? IPv6 ?????. ????? ?? ? ??????????? unique local ????? (?.?. ?? ???? FD00). ? ???? ??? FD00:0:0:1::2/64. DNS - FD00:0:0:1::1 (????? DC).

?????, ?????????? ?????????? ?????? ????????????? (??? ????????? ? ????? ? ???????? ?????? ???? Network Access and Protection Server). ?????????? ?????? ??? ??????, ?????? ?????? ???? ????????????? ?? ????.

RRAS ??????? ? ??????????? ??? ????????????? IPv6 ? ????????? ????. ????????????? ?????? ?? ?????????? ????? ?????????. ????????????? IPv4 ????.

????? ?????????? ?????? ??????????? ??? ?????????? DA ? ?????????? ? Windows 7. ?????, ??? ??? ????? ??????. ?? ??????? ???????? ?????????? ?????? ?????? ???????????? ? ???????? trusted root certificates ?? ??????? DA ? Windows 7. ??????? ??? ??????? ? ??????? GP.

??? ??????????? ???? IIS ??? ????? ?? ? ????????????? ????? IIS. ?.?. ?? c Windows 7 ?????????? ???? ????????????? (? ????????????? ???? ??? ? ????????) ????? ??????? ? ?????????????, ??????? ???????????? url. ???? url ?????? ???????? ?????? ???? ? ?? ?????? ???????? ???????. URL ????? ??? https://<FQDN ??????? ? IIS>/insideoutside, ? ???? ??????? https://dalocation.contoso.com/insideoutside. ??? ???? ????? ??????? ?????? <FQDN ??????? ? IIS>. ??? ????????? ?????? ??????? ?????????????. ?? ?????? insideoutside ????????? ?????? html ?????????. ??? ?????????? IIS ??????? ????????? ??????????, ??????? ???? ????? ?????????? ?? ???? ?????? ? ?????????? IIS. ??? ??????? ??????????? ?????????? ??????? common name = <FQDN ??????? ? IIS>, ? ????? ??????? ??? dalocation.contoso.com ? DNS ??? = <FQDN ??????? ? IIS>, ? ????? ??????? ??? ????? ?? dalocation.contoso.com. 

 

?????? ?????????? ????????? DirectAccess.

????? ???? ? ???? ???? -> Administrative Tools -> DirectAccess Management ? ????? ? ?????? setup. ???? ??? ????? ????????? ????????? ?????????, ?? ?? ??????? 4 ???? ?? ????????? DirectAccess. ????? ?????????? ????? ??????? ?????? ? ????????? DirectAccess :-)

????, ??? 1, remote clients. Edit -> ???????? ??????, ? ??????? ????? ??????????, ?????????????? ?? DirectAccess. ?????? ?????? ???? ??????? ? AD ? ??? ?????? ???? ??????? ?????? ???????????, ??????? ????? ???????????? ?????? ????? DirectAccess. ?????????? ?????? ???? ? ??????. ?????? ?????? Finish.

??? 2, DirectAccess Server. Edit -> Interface Connected to Internet, ???????? ??????? ?????????, ???????????? ? ???????? ? interface connected to internal network ???????? ?????????, ???????????? ? ?????????? ????. Next. IPv6 prefix ????? FD00::/48 ???? ?? ??????? ????????????? unique local ??? ??? ????? ?. IPv6 prefix to assign to remote clients FD00:0:0:5555::/64. Next. Select the root certificate -> Browse -> ???????? ???????? ??????????, Finish.

??? 3, Infrastructure Server. Edit -> Network Location Server is run on the DirectAccess server. ???????? ?????????? ??? ???-???????. ???? ?? ?????????? ??? ?????????? ?? ??? ?????? ?????. Next. ? ????????, ? ??????? name suffix ?????? ???? ??? ??????? ?????????? ????? (? ???? ??? contoso.com) ? IPv6 ????? DNS ??????? FD00:0:0:1::1. ? ??? ??????????, ? ???? ??? dalocation.contoso.com. ?????? DNS ???????? ???? ???? ?? ??????. ???? ? ??????? ???????? ???-?? ???????? ?? ????? ?????? ? FQDN IIS ??????? (contoso.com ? dalocation.contoso.com), ?? ?? ???-?? ??????? ?? ??? ? ?????? ????? ? ??? ?????? ?? ??????????. Local name resolution, ???????? ?????? ?????. Next, Finish.

??? 4. Edit -> Require no additional end-to-end authentication, ?.?. ??????????????? ??????????/?????????????? ??? ??????? ? ?????????? ???????? ?? ?????????.

 

???! ?????? ???????? ?????? Save ? Finish, ????? ???????????? ????????? ????????, ??? ???????? ???? ????????? ? ??????? ? ???????? (gpupdate) ? ???????????? ???????? ????? DirectAccess! ?.?. ???? ?? ? Windows 7 ????? ?????????? IPv4 ????? (IPv6 ????? ??? ?? ?????), ?? ?????? ? ???????? ???? ???? ???????? (??????? ???????????? – contoso.com, ???????? ????). ???? ?? ????????? ? ???????? ? ??????? IPv4, ?? ?????? ????? Direct Access ? ??????? ???????????? – ????????? ????. ??? ??? ???????? ??????? ????????????? ???? (?? ?????? ????????) ? ??? ????????? ????? ??????????? ?? ????????????? ???? (???????? ? ???? ????? ???????????? ????????? ??????????).

IPv4 ????? ? ?????? ??????????? ? ???????? ?????? ???? ???????. ????? ?????????? ????? IP ?????? (????????? ? ?????????, ?? ?? NAT??), ?????????? ????????? isatap ??? teredo.