Site-to-Site VPN with Server 2016 - best practice

Question

_{Thursday, March 9, 2017 7:18 PM}

Hi,

I am studying for MCSA 70-741 exam of Server 2016 and there is one topic in the blueprint which I cant find any  up-to-date information or help:

• Implement remote access and site-to-site (S2S) VPN solutions using remote access gateway

What is the best way to implement S2S VPN between two Windows Server 2016?
I did find few guides where demand-dial interfaces were used but not sure if it is the newest way?

Did find some powershell commands, like Add-VpnS2SInterface and Connect-VpnS2SInterface. Can these be used and how?

Thank you for help!

All replies (4)

_{Thursday, March 9, 2017 8:37 PM ✅Answered}

Hi Matt, I have used the following article several times when I have done VPN connetion between Azure and on-premises (with RRAS).
Very well explaned step-by-step guide. Please take a look of it, I think this could help you.

https://blogs.technet.microsoft.com/jletsch/2016/03/15/lets-configure-azure-site-to-site-vpn-with-rras-in-azure-resource-manager/

Good luck with the exam!

Regards,
-Tomi

Tomi Pietilä

Please remember to mark the replies as answers if they help and unmark them if they provide no help.
Blog
Twitter
LinkedIn

_{Monday, March 13, 2017 2:17 PM}

Ok thank you Tomi, will try that guide.

Any powershell guide to this? And in what situations do those previously mentioned Add-VpnS2SInterface and Connect-VpnS2SInterface commands come in to play?

_{Monday, March 13, 2017 6:49 PM}

The Add-VpnS2SInterface cmdlet creates a site-to-site (S2S) interface with the specified parameters to customize Internet Protocol security (IPsec) settings. So basically you can create S2S VPN from the GUI or via powershell, same result in both. If you want to use powershell, check following article (RRAS/VPN section). There you can find examples:

https://blogs.technet.microsoft.com/canitpro/2014/07/01/step-by-step-multi-site-azure-vpn/

Connect-VpnS2SInterface Cmdlet is also used in the same article. It is used to connect site-to-site (S2S) interface that is currently not connected.

Regards,
-Tomi

Tomi Pietilä

Please remember to mark the replies as answers if they help and unmark them if they provide no help.
Blog
Twitter
LinkedIn

_{Monday, March 27, 2017 2:41 AM}

Hi,

Just want to confirm the current situations.

Please feel free to let us know if you need further assistance.

Best Regards,

John

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].