fix: routing role add RTR-03, routing fix RTR-01

This commit is contained in:
Winston Smith 2021-05-10 16:35:35 +02:00
parent 9b491026b6
commit 11599fa377
2 changed files with 20 additions and 19 deletions

View File

@ -67,6 +67,16 @@ Start-Service RemoteAccess
# End of scritlet
### Activating remote-access role
echo "installing VPN routing role"
Install-windowsFeature -Name Routing -IncludemanagementTools
Install-remoteAccess -VpnType Routingonly
set-service RemoteAccess -StartupType Automatic
Start-Service RemoteAccess
#END
### Activate NAT and DHCP Relay ###
echo "Activating NAT and DHCP Relay"
@ -84,22 +94,6 @@ netsh routing ip relay add interface "Arc-SRV"
netsh rout ip rel set int WAN min=0
netsh routing ip relay add dhcpserver 192.168.8.1
### Activating remote-access role
echo "installing VPN routing role"
Install-windowsFeature -Name Routing -IncludemanagementTools
Install-remoteAccess -VpnType Routingonly
set-service RemoteAccess -StartupType Automatic
Start-Service RemoteAccess
#END
### Activating DHCP Relay (Useless?)
#netsh -f ./Arc-CLI.conf
#netsh -f ./Arc-SRV.conf
#netsh -f ./WAN.conf
# End of scriptlet
### Set connection as private ###
echo "Set connection as private"

View File

@ -38,9 +38,9 @@ $IPType = "IPv4"
netsh interface ip set address name="WAN" static 192.168.255.254 255.255.255.0
#Aston
#Aston
netsh interface ip set address name="Aston" DHCP
netsh interface ip set address name="Aston" DHCP
### DNS Conf for all InterfaceAlias
@ -50,12 +50,19 @@ foreach ($c in Get-NetAdapter) { write-host 'Setting DNS for' $c.interfaceName ;
### Install Routing and necessary linked roles
echo "installing VPN routing role"
#echo "installing VPN routing role"
Install-windowsFeature -Name Routing -IncludemanagementTools
Install-remoteAccess -VpnType Routingonly
set-service RemoteAccess -StartupType Automatic
Start-Service RemoteAccess
# Configure NAT
netsh routing ip nat installing
netsh routing ip nat add interface name="WAN" mode=Private
netsh routing ip nat add interface name="Aston" mode=FULL
### Change ZoneAlarm rule to accept incoming ICMP ipv4 probes ###
Get-NetFirewallRule -name "*ICMP4-ERQ-In*" |Enable-NetFirewallRule