# Alexandre SIMAO
# GPLv3

### TODO ?

# Script to install and configure a Fuckdows Server 2016 as a router
# RTR-03 Only

# Change the poor machine name
Rename-computer "RTR-03"

Rename-NetAdapter -Name "Ethernet" -NewName "WAN"
Rename-NetAdapter -Name "Ethernet 2" -NewName "Aston"

# Install Routing and necessary linked roles
Install-WindowsFeature RemoteAccess, RSAT-RemoteAccess-PowerShell, Routing -IncludeManagementTools
set-service RemoteAccess -StartupType Automatic
Start-Service RemoteAccess

netsh interface ip set address "WAN" static 192.168.255.254 255.255.255.0
netsh interface ip set dns name="WAN" static 9.9.9.9

# Activate NAT

netsh routing ip nat install
netsh routing ip nat add interface name="WAN" mode=PRIVATE
netsh routing ip nat add interface name="Aston" mode=FULL
Set-NetConnectionProfile -networkcategory private

# Change ZoneAlarm rule to accept incoming ICMP ipv4 probes
$Params = @{
	"Name"   = 'vm-monitoring-icmpv4'
	"Action"        = 'Allow'
}

Set-NetFirewallRule @Params

# Add routes

route add -p 192.168.8.0/24 192.168.255.8
route add -p 192.168.12.0/24 192.168.255.8
route add -p 192.168.128.0/24 192.168.255.128
route add -p 192.168.255.0/24 192.168.255.254