SOLVED

Always On VPN

%3CLINGO-SUB%20id%3D%22lingo-sub-1341335%22%20slang%3D%22en-US%22%3EAlways%20On%20VPN%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1341335%22%20slang%3D%22en-US%22%3E%3CP%3EI%20am%20trying%20to%20enable%20Always%20On%20VPN%20for%20some%20new%20remote%20workers.%26nbsp%3B%20from%20the%20documentation%20I've%20read%2C%20it%20seems%20the%20RRAS%2FVPN%20server%20siting%20in%20the%20perimeter%20network%20is%20a%20member%20server%20in%20AD.%26nbsp%3B%20Is%20this%20correct%3F%20I%20am%20hesitant%20adding%20a%20server%20to%20AD%20that%20sits%20in%20the%20DMZ.%26nbsp%3B%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks!%3C%2FP%3E%3CP%3ERN%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1345531%22%20slang%3D%22en-US%22%3ERe%3A%20Always%20On%20VPN%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1345531%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F80138%22%20target%3D%22_blank%22%3E%40Rob%20Nunley%3C%2FA%3E%26nbsp%3BThere%20is%20no%20hard%20requirement%20for%20the%20RRAS%20server%20to%20be%20joined%20to%20a%20domain.%20It%20is%20perfectly%20acceptable%20to%20configure%20the%20VPN%20server%20as%20a%20standalone%20server%20in%20the%20DMZ%20supporting%20Always%20On%20VPN%20connections.%20It's%20something%20I've%20done%20numerous%20times%20without%20issue.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Contributor

I am trying to enable Always On VPN for some new remote workers.  from the documentation I've read, it seems the RRAS/VPN server siting in the perimeter network is a member server in AD.  Is this correct? I am hesitant adding a server to AD that sits in the DMZ.  

 

Thanks!

RN

1 Reply
Highlighted
Solution

@Rob Nunley There is no hard requirement for the RRAS server to be joined to a domain. It is perfectly acceptable to configure the VPN server as a standalone server in the DMZ supporting Always On VPN connections. It's something I've done numerous times without issue.