Checklist: Moving the IPsec Gateway to Another Server
Updated: July 22, 2010
Applies To: Windows Server 2008 R2
This checklist includes cross-reference links to important concepts about adding capacity to your DirectAccess deployment by moving the Internet Protocol security (IPsec) gateway function to another server when you are using the full intranet or selected server access models. It also contains links to procedures and other checklists that will help you complete the tasks that are required to implement this design.
Note
Complete the tasks in this checklist in order. When a reference link takes you to a conceptual topic, a procedure, or to another checklist, return to this topic so that you can proceed with the remaining tasks in this checklist.
Checklist: Moving the IPsec gateway to another server
Task | Reference | |
---|---|---|
Review important concepts for moving the IPsec gateway to another server. |
||
As needed by your design plan, configure the second server (the IPsec gateway) for the full intranet or selected server access model. |
Checklist: Implementing a DirectAccess Design for Full Intranet Access Checklist: Implementing a DirectAccess Design for Selected Server Access |
|
Configure both servers on an intra-server subnet to support the dual-server configuration. |
||
Configure the IPv6 connectivity server as the 6to4 relay, Teredo server, and Internet Protocol over Secure Hypertext Transfer Protocol (IP-HTTPS) server. |
||
Configure the IPsec gateway server and the Group Policy settings for the new configuration. |