Checklist: Configuring Remote Access Behind a NAT-Enabled Router

Applies To: Windows Server 2008

Task	Reference
Review key concepts.	What Is NAT? and Virtual Private Networking
Install the Routing and Remote Access service, and configure the server using the Routing and Remote Access Server Setup Wizard.	Install and Enable the Routing and Remote Access Service
Configure dial-in properties and network policies for dial-in permission, authentication, and encryption settings.	See "Checklist: Configure NPS for Dial-Up and VPN" in Network Policy Server Help.
Configure packet filters and Windows Firewall.	Filters and Remote Access Configurations and VPN servers and firewall configuration (https://go.microsoft.com/fwlink/?linkid=89249). (This information describes VPN and firewalls as they are configured in Windows Server 2003.)
Configure services to allow on the public interface.	IPv4 - NAT - Interface Properties - Services and Ports Tab
(Optional) Configure the virtual private network (VPN) server as a RADIUS client.	See "RADIUS Clients" in Network Policy Server Help.

Additional references

• For more information about configuring remote access behind a NAT-enabled router, see https://go.microsoft.com/fwlink/?LinkId=89009 and https://go.microsoft.com/fwlink/?LinkId=89010.