From 5d3d00aa65176628da44f5a1b67b2ef598020a9e Mon Sep 17 00:00:00 2001 From: Winston Smith Date: Mon, 10 May 2021 17:24:51 +0200 Subject: [PATCH] Revert "Chore: change Firewall rule SRV-01" This reverts commit 3f26aee7daa8857cb594b28da85ac0d4986b7e4b. --- Guests/RTR-01.ps1 | 10 ++++++++++ Guests/SRV-01.ps1 | 11 ++++++++--- 2 files changed, 18 insertions(+), 3 deletions(-) diff --git a/Guests/RTR-01.ps1 b/Guests/RTR-01.ps1 index 4c9daa3..445a708 100644 --- a/Guests/RTR-01.ps1 +++ b/Guests/RTR-01.ps1 @@ -67,6 +67,16 @@ Start-Service RemoteAccess # End of scritlet + +### Activating remote-access role +echo "installing VPN routing role" +Install-windowsFeature -Name Routing -IncludemanagementTools +Install-remoteAccess -VpnType Routingonly +set-service RemoteAccess -StartupType Automatic +Start-Service RemoteAccess + +#END + ### Activate NAT and DHCP Relay ### echo "Activating NAT and DHCP Relay" diff --git a/Guests/SRV-01.ps1 b/Guests/SRV-01.ps1 index 1f7da53..590f06d 100644 --- a/Guests/SRV-01.ps1 +++ b/Guests/SRV-01.ps1 @@ -92,11 +92,16 @@ Add-DhcpServerv4ExclusionRange -ScopeID 192.168.128.0 -StartRange 192.168.128.1 Add-DhcpServerv4ExclusionRange -ScopeID 192.168.128.0 -StartRange 192.168.128.240 -EndRange 192.168.128.254 #END -### Change ZoneAlarm rule to accept incoming ICMP ipv4 probes ### +### Change ZoneAlarm rule to accept incoming ICMP ipv4 probes -Get-NetFirewallRule -name "*ICMP4-ERQ-In*" | Enable-NetFirewallRule +echo "Allowing ICMPv4 probes" +$Params = @{ + "Name" = 'vm-monitoring-icmpv4' + "Action" = 'Allow' +} -#END +Set-NetFirewallRule @Params +# END ### Add routes for RTR-01