Internet access for A. Datum Corporation

  • Article

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

Internet access for A. Datum Corporation

This section describes how remote access is configured for a fictional company using the features available in the Windows Server 2003 family. While your network configuration may be different than described here, you can apply the basic concepts.

A. Datum Corporation is an Internet service provider that provides dial-up Internet access and Internet services for customers in the greater Los Angeles metropolitan area. A. Datum has implemented a remote access solution that connects dial-up customers to the Internet.

The network configuration

The A. Datum network is configured as follows:

  • A. Datum has obtained a class B network ID of 131.107.0.0 with a subnet mask of 255.255.0.0 from the Internet Assigned Numbers Authority (IANA). A. Datum connects to the Internet backbone by using a T3 WAN link. The IP address of the WAN adapter is 131.107.0.1.

  • To receive up to 512 simultaneous incoming calls, A. Datum is using a modem bank switch that is connected to the local telephone service provider. The modem bank switch connects to the remote access server by using a modem bank adapter. Dial-up clients can dial in to A. Datum at the phone number 555-0122.

The following illustration shows the network configuration of the A. Datum remote access server.

Network configuration of A. Datum's RAS

The remote access server computer is configured as follows:

1. Install the WAN adapter in the remote access server

The network adapter that is used to connect to the Internet is installed according to the adapter manufacturer's instructions. Once the driver is installed and functioning, the adapter appears as a local area connection in the Network Connections folder.

2. Configure TCP/IP on the WAN adapter

The IP address of 131.107.0.1 with the subnet mask 255.255.255.255 is configured. DNS server addresses are configured. WINS server addresses and a default gateway are not configured.

3. Install the Routing and Remote Access service

The Routing and Remote Access Server Setup Wizard is run. Within the wizard, both remote access and routing for LAN and demand-dial routing are enabled, and all ports are enabled for both routing and remote access. For more information, see Enable the Routing and Remote Access service.

4. Install the modem bank adapter in the remote access server

The modem bank adapter that is used to connect to the modem bank switch is installed according to the adapter manufacturer's instructions. Once the driver is installed and functioning, the device and its ports appear under Ports in Routing and Remote Access.

5. Configure the ports of the modem bank device for remote access

All of the ports of the modem bank device are enabled for remote access. For more information, see Configure ports for remote access.

6. Configure a static IP address pool

A static IP address pool with a starting IP address of 131.107.192.1 and an ending IP address of 131.107.255.254 is configured. This creates a static address pool for up to 16,381 remote access clients.

For more information, see Create a static IP address pool.

7. Configure a static route to reach Internet locations

To reach Internet locations, a static route is configured with the following settings:

  • Interface: The WAN adapter attached to the Internet

  • Destination: 0.0.0.0

  • Network mask: 0.0.0.0

  • Gateway: 0.0.0.0

  • Metric: 1

Note

  • Because the WAN adapter creates a point-to-point connection to the ISP, any address can be entered for the gateway address. The gateway address of 0.0.0.0 is an example. 0.0.0.0 is reserved as the unspecified IP address.

User accounts and remote access policy configuration

The A. Datum remote access server is a stand-alone server that uses the access-by-user administrative model. Access is controlled by setting the dial-in permission of individual user accounts to either Allow access or Deny access. The default remote access policies are not deleted.

Note

  • The example companies, organizations, products, people and events depicted herein are fictitious. No association with any real company, organization, product, person or event is intended or should be inferred.