Direct Access

[Quackers]

Anybody implimented Direct Access yet with Server 2008 and Windows 7?

 

Its the only feature that makes me want to upgrade, but it needs IPv6.

 

I've not fully read up on it, and there is a lot to digest, but does it need IPv6 on the public address? or just all the server on there internal address?

 

I've just got the feeling i'm not going to be able to implement due to the usual County internet connection.

[t_h]

I'd also like to know this. It sounded great until I read about IPv6, which kinda put me off as I have too much on my plate at the moment. It's good to know that it is something I could pick up at a later date though.

[EduTech]

I am also looking into this at the moment, i believe you will have to wait until your LEA implement IPv6 (but dont quote me on that)

 

I will be looking at implemeting this myself when we upgrade to 2008 R2 and Windows 7 in the next long holiday.. but again i need to know weather you can do it without having IPv6 at LEA level and weather just having it in IPv6 Internally will allow it to work

 

James.

[t_h]

Yeah this is the thing, it looks like the answer to a few of my problems but there is a lot to consider.

 

This is on my "to-read" list anyway:

 

DirectAccess

[Quackers]

Here's a step by step guide for anybody wanting to play.

 

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=8d47ed5f-d217-4d84-b698-f39360d82fac

[powdarrmonkey]

In IPv6 all addresses can be publicly routed, that's half the point. There is no NAT any more, no port forwarding... However to use it at the moment you need an IPv6 enabled router and a service that provides it natively, or a (carefully configured and probably *nix) machine that acts as a router through a tunnel from SixXS or Hurricane Electric. (My ISP, Goscomb.net, provide it natively, and it rocks.)

[Theblacksheep]

I am also looking into this at the moment, i believe you will have to wait until your LEA implement IPv6 (but dont quote me on that)

 

I will be looking at implemeting this myself when we upgrade to 2008 R2 and Windows 7 in the next long holiday.. but again i need to know weather you can do it without having IPv6 at LEA level and weather just having it in IPv6 Internally will allow it to work

 

James, Only two consecutive IPv4 address are needed externally, ipv6 not needed externally. You need IPv6 enabled on the internal network cards.

 

DA is built into UAG too, just need to feed it a network card and the two (consecutive) IPv4 address.

 

Awaiting additional IPs from LA.

Edited October 20, 2009 by Theblacksheep

[Ric_]

Don't forget that Direct Access is one of the killer features only available in Windows 7 Enterprise (along with BitLocker and BitLocker2Go) so make sure your software assurance is in place

[DrCheese]

So er... has anyone attempted this yet? I've read that it's possible to tunnel the ipv6 info over ipv4 so users can use it at home with no changes at the user end. It's something I'd *really* love to do but the list of requirements is crazy. It would totally change the way I feel about staff laptops tho

[Theblacksheep]

Attempted.... but the 2 external IP address (that can be IPv4) that are required for DA can't be NAT'd address's.... no go here without 2nd internet line etc.

 

Shame, easy to setup with UAG.

Edited February 26, 2010 by Theblacksheep