Install and Enable the Routing and Remote Access Service

Updated: April 30, 2010

Applies To: Windows Server 2008, Windows Server 2008 R2

Routing and Remote Access Services (RRAS) in Windows Server 2008 R2 and Windows Server 2008 is a server role that can be installed by using Server Manager and the Add Roles Wizard.

Membership in the local Administrators group, or equivalent, is the minimum required to complete this procedure.

To install Routing and Remote Access Services

1. Click Start, click Administrative Tools, and then click Server Manager.

2. In the Server Manager navigation tree, click Roles, and then under Roles Summary, click Add Roles.

   The Add Roles Wizard appears.

3. On the Before You Begin page, click Next.

4. On the Select Server Roles page, select Network Policy and Access Services, and then click Next.

5. On the Network Policy and Access Services page, click Next.

6. On the Select Role Services page, select Routing and Remote Access Services, and then click Next. This automatically selects all of the role services for Routing and Remote Access Services.

7. On the Confirm Installation Selections page, click Install.

8. On the Installation Results page, click Close.

After installing the Routing and Remote Access service, you must enable the service to configure your server for routing and remote access.

To enable the Routing and Remote Access service

1. If this server is a member of an Active Directory domain, then add the computer account of this server to the RAS and IAS Servers security group in the domain of which this server is a member. You can use Active Directory Users and Computers or the netsh ras add registeredserver command. If this server is using local authentication or is authenticating against a RADIUS server, skip this step.

2. Open the Routing and Remote Access MMC snap-in. In Server Manager, expand Roles, expand Network Policy and Access Services, and then click Routing and Remote Access.

3. In the navigation tree, right-click Routing and Remote Access, and then click Configure and Enable Routing and Remote Access.

4. On the Welcome page, click Next.

5. On the Configuration page, select the option that contains the RRAS components required by your design, and then click Next.

6. On the Remote Access page, select VPN and Dial-up check boxes as required by your design, and then click Next.

7. On the VPN Connection page, select the network interface that is connected to the public network, and then click Next. We recommend that you rename the interfaces in Network and Sharing Center to more easily identify the network adapters in your computer.

8. On the IP Address Assignment page, specify whether you will use DHCP or a manually configured IP address range to assign addresses to your remote access clients, and then click Next.

9. If you selected From a specified range of addresses, then on the Address Range Assignment page, click New, and then enter the starting and ending addresses of the range. Click OK to save the range, and then click Next when you are done.

10. On the Managing Multiple Remote Access Servers page, specify whether you will use the local RRAS server or a remote RADIUS server to authenticate your remote access clients, and then click Next.

11. On the NAT Internet Connection page, specify the network interface that connects this computer to the public network, and then click Next. If you choose to create a demand-dial interface instead of using a physical interface to connect to the Internet, then the Demand-dial Interface Wizard appears when you finish the Setup Wizard. For instructions on how to create a demand-dial interface to connect to the Internet, see Configure the Routing and Remote Access Service and Demand-Dial Interfaces.

12. On the Completing the Routing and Remote Access Server Setup Wizard page, click Finish.