# Made by Alexandre SIMAO # GPLv3 # Script to install and configure a Fuckdows Server 2016 as a router # RTR-03 Only # Script done echo "Shamefully made by Alexandre Simao. Pardon-me M. Stallman" ### Change the poor machine name echo "Renaming Computer" Rename-computer RTR-03 #END ### Rename Adapters by parsing the VM device name echo "Renaming Computer" $adapts = Get-NetAdapter foreach ($adapt in $adapts) { $HVName = (Get-NetAdapterAdvancedProperty -name $adapt.name -DisplayName "Hyper-v Network Adapter Name").DisplayValue Rename-Netadapter -name $adapt.name -NewName $HVName } #End ### Pausing to let things settle echo "Sleeping 10s" Sleep 10 ### Général IP configure echo "IP Configuration" $MaskBits = 24 # This means subnet mask = 255.255.255.0 $IPType = "IPv4" #WAN IP conf netsh interface ip set address name="WAN" static 192.168.255.254 255.255.255.0 #Aston netsh interface ip set address name="Aston" DHCP ### DNS Conf for all InterfaceAlias echo "DNS conf" foreach ($c in Get-NetAdapter) { write-host 'Setting DNS for' $c.interfaceName ; Set-DnsClientServerAddress -InterfaceIndex $c.interfaceindex -ServerAddresses ('9.9.9.9') } #End ### Install Routing and necessary linked roles #echo "installing VPN routing role" Install-windowsFeature -Name Routing -IncludemanagementTools Install-remoteAccess -VpnType Routingonly set-service RemoteAccess -StartupType Automatic Start-Service RemoteAccess # Configure NAT netsh routing ip nat install netsh routing ip nat add interface name="WAN" mode=Private netsh routing ip nat add interface name="Aston" mode=FULL ### Change ZoneAlarm rule to accept incoming ICMP ipv4 probes ### Get-NetFirewallRule -name "*ICMP4-ERQ-In*" |Enable-NetFirewallRule #END #netsh -f ./WAN.conf ### Set connection as Private echo "Setting connection as private" Get-NetAdapter | Set-NetConnectionProfile -NetworkCategory Private #End # Add routes echo "Adding routes" route add -p 192.168.8.0/24 192.168.255.8 route add -p 192.168.12.0/24 192.168.255.8 route add -p 192.168.128.0/24 192.168.255.128 route add -p 0.0.0.0/0 192.168.255.254 ipconfig /renew Read-Host "Finished???" Restart-Computer