
You'll need access to four physical computers or virtual machines (VMs).Įnsure that your user account on all machines is a member of Administrators, or equivalent. The connection is initiated or terminated based on the response that the VPN server received from the NPS server. The NPS server forwards an Access-Accept or Access-Deny response to the VPN server. The NPS server processes the connection request, including performing authorization and authentication, and determines whether to allow or deny the connection request. The VPN server is also configured as a Remote Authentication Dial-In User Service (RADIUS) Client the VPN RADIUS Client sends the connection request to the NPS server for connection request processing. The VPN client uses the IP address returned by DNS to send a connection request to the VPN gateway.

The Windows VPN client uses a public DNS server to perform a name resolution query for the IP address of the VPN gateway. The process is composed of the following steps:

You'll create a sample infrastructure that shows you how to implement an Always On VPN connection process. In this tutorial, you'll learn how to deploy Always On VPN connections for remote domain-joined Windows client computers.
