DirectAccess serveri paigaldamine ja haldamine Windows Server operatsioonisüsteemis

From ICO wiki
Revision as of 16:59, 28 March 2011 by Akulikov (talk | contribs)
Jump to navigationJump to search

Artur Kulikov


DirectAccess is a new feature in Windows 7 (Ultimate and Enterprise editions only) and Windows Server 2008 R2 that provides seamless intranet connectivity to DirectAccess client computers when they are connected to the Internet. Unlike most traditional VPN connections, which must be initiated and terminated by explicit user action, DirectAccess connections is designed to connect automatically as soon as the computer connects to the internet. In 2010, Microsoft Forefront Unified Access Gateway was released, which simplifies[1][2][3] the deployment of DirectAccess, and includes additional components that make it easier to integrate without the need to deploy IPv6 on the network.

Technology

DirectAccess establishes IPSec tunnels from the client to the DirectAccess server, and uses IPv6 to reach intranet resources or other DirectAccess clients. This technology encapsulates the IPv6 traffic over IPv4 to be able to reach the intranet over the Internet, which still relies on IPv4 traffic. A DirectAccess client can use one of several tunnelling technologies, depending on the configuration of the network the client is connected to. The client can use 6to4, Teredo tunneling, or IP-HTTPS, provided the server is configured correctly to be able to use them. For example, a client that is connected to the internet directly will use 6to4, but if it is inside a NATed network, it will use Teredo instead.

DirectAccess in UAG provides enterprise features for a DirectAccess solution, such as centralized management, high availability, and enhanced security (UAG contains a EAL4+ Certified firewall, so it can be used on the edge of your network). UAG also provides a NAT64 and DNS64, allowing you to provide DirectAccess clients with access to IPv4-only resources on your network.

Requirements

DirectAccess requires:

  • one or more DirectAccess servers running Windows Server 2008 R2 with two network adapters: one that is connected directly to the Internet, and a second that is connected to the intranet.
  • on the DirectAccess server, at least two consecutive, public IPv4 addresses assigned to the network adapter that is connected to the Internet.
  • DirectAccess clients running Windows 7 (Ultimate and Enterprise editions only).
  • at least one domain controller and Domain Name System (DNS) server running Windows Server 2008 SP2 or Windows Server 2008 R2.
  • public key infrastructure (PKI) to issue computer certificates.

Smart card certificates, and health certificates for Network Access Protection may be used along with PKI.

A third-party NAT64 device may be used to provide access to IPv4-only resources to DirectAccess clients.[4]

References

  1. ↑ Microsoft Forefront Unified Access Gateway 2010
  2. ↑ Windows Server Division WebLog
  3. ↑ Portcullis Systems UAG DirectAccess Appliance
  4. ↑ DirectAccess Requirements

External links

ru:DirectAccess

Retrieved from "https://wiki.itcollege.ee/index.php?title=DirectAccess_serveri_paigaldamine_ja_haldamine_Windows_Server_operatsioonisüsteemis&oldid=24357"