2021-04-09 11:34:47 +02:00
|
|
|
|
# Alexandre SIMAO
|
|
|
|
|
|
# GPLv3
|
|
|
|
|
|
|
|
|
|
|
|
# Script to install and configure a Fuckdows Server 2016 as a router
|
2021-04-09 11:43:46 +02:00
|
|
|
|
# RTR-01 Only
|
2021-04-09 11:34:47 +02:00
|
|
|
|
|
|
|
|
|
|
# Change the poor machine name
|
2021-04-09 11:02:54 +02:00
|
|
|
|
$name = Read-host "Nouveau nom d'h<>te?"
|
|
|
|
|
|
Rename-computer $name
|
2021-04-09 11:34:47 +02:00
|
|
|
|
|
|
|
|
|
|
# Install Routing and necessary linked roles
|
|
|
|
|
|
Install-WindowsFeature RemoteAccess, RSAT-RemoteAccess-PowerShell, Routing
|
|
|
|
|
|
Install-remoteAccess -VpnType Vpn
|
|
|
|
|
|
|
|
|
|
|
|
# Display interfaces and active forwarding for all of thm via Regedit
|
2021-04-09 11:02:54 +02:00
|
|
|
|
netsh inter show inter
|
|
|
|
|
|
Set-ItemProperty -path 'HKLM:\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet`
|
|
|
|
|
|
\Services\Tcpip\Parameters' -Name 'IPEnableRouter' -Value '0x00000001'
|
|
|
|
|
|
Set-NetConnectionProfile -NetworkCategory Private
|
|
|
|
|
|
|
2021-04-09 11:34:47 +02:00
|
|
|
|
# Activate NAT and DHCP Relay
|
|
|
|
|
|
netsh routing ip nat install
|
|
|
|
|
|
netsh routing ip nat add interface "WAN"
|
|
|
|
|
|
netsh routing ip nat set interface "WAN" mode = full
|
|
|
|
|
|
netsh routing ip nat add interface "Arc-CLI"
|
|
|
|
|
|
netsh routing ip nat add interface "Arc-SRV"
|
|
|
|
|
|
ntsh -f ./*.conf
|
|
|
|
|
|
|
|
|
|
|
|
# Change ZoneAlarm rule to accept incoming ICMP ipv4 probes
|
|
|
|
|
|
$Params = @{
|
|
|
|
|
|
"Name" = 'vm-monitoring-icmpv4'
|
|
|
|
|
|
"Action" = 'Allow'
|
|
|
|
|
|
}
|
|
|
|
|
|
|
2021-04-09 11:43:46 +02:00
|
|
|
|
Set-NetFirewallRule @Params
|
|
|
|
|
|
|
|
|
|
|
|
# Add routes
|
|
|
|
|
|
|
|
|
|
|
|
route add -p 192.168.8.0/24 192.168.8.254
|
|
|
|
|
|
route add -p 192.168.12.0.24 192.168.12.254
|
|
|
|
|
|
route add -p 192.168.255.0/24 192.168.255.8
|
|
|
|
|
|
route add -p 192.168.128.8/24 192.168.255.128
|
|
|
|
|
|
route add -p 0.0.0.0/0 192.168.255.0
|
