Windows Server® 2008 Networking and Network Access Protection (NAP)

Deploying Site-to-Site VPN Connections

The deployment of site-to-site VPN connections using Windows Server 2008 consists of the following tasks:

• Deploying certificates

• Configuring Internet infrastructure

• Configuring Active Directory for user accounts and groups

• Configuring RADIUS servers

• Deploying the answering routers

• Deploying the calling routers

• Configuring site network infrastructure

• Configuring intersite network infrastructure

Deploying Certificates

You must deploy certificates if you are using the following:

• L2TP/IPsec connections with certificate authentication. Each VPN router computer needs a computer certificate.

• EAP-TLS authentication with registry-based user certificates. Each calling router needs a user certificate, and each authentication server ...