Install and Configure Route and Remote Access Service on Server Core

Kent Chen — Sun, 21 Jan 2018 08:43:15 +0000

I am setting up a Hyper-V host on a Windows Server Core 2016 to host a bunch of testing VMs that need to be totally separated from the main network. That’s why I need the Route and Remote Access service enabled on server core to act as a NAT to provide Internet access to all these VMs.

Install the Remote Access Server Role

1. On Server Core console, type PowerShell to start.

2. Install Remote Access feature by

Install-WindowsFeature RemoteAccess

Then, type Restart-Computer to restart the computer.

3. Once rebooted, install Remote Access PowerShell module by:

Install-WindowsFeature RSAT-RemoteAccess-PowerShell

No need to restart the computer.

4. Install the Routing feature by:

Install-WindowsFeature Routing

Type Restart-Computer to restart the computer.

Configure and enable Routing

It’s easier to use Remote Access Management Console on Windows 10 computer to configure and enable the routing feature. Download and install Remote Server Administration Tools for Windows 10 as Remote Access Manager is part of that toolkit.

Launch Remote Access Management Console and click Manage a Remote Server on the right Tasks list.

Once connected successfully, click DirectAccess and VPN on the left pane and Open RRAS Management under VPN on the right.

In Route and Remote Access, click Action and choose Configure and Enable Routing and Remote Access to launch the configuration wizard.

Select Network address translation (NAT) option from the list, and Next.

Select the NIC that has internet access to Provide internet and the private Virtual Switch for VMs as the Internal Network. If all go well as planned, you will be up and running in a few seconds.

The post Install and Configure Route and Remote Access Service on Server Core first appeared on KC's Blog.

Managing Hyper-V Host from Windows 10 Outside Domain

Kent Chen — Sun, 21 Jan 2018 08:10:40 +0000

It’s not as easy as I thought, as there are quite a few pieces that need to be taken care of before you can happily manage Hyper-V host remotely from any computer, even one outside a managed domain.

If you want to set up to manage your office Hyper-V host from your home computer that’s not part of your office network domain at all, here are the steps you can follow:

On the Hyper-V host

1. Enable PowerShell Remoting and configure the necessary Firewall rules

Enable-PSRemoting

2. Set up the Firewall rule to allow remote access from public networks on Windows platforms.

Enable-PSRemoting -SkipNetworkProfileCheck -Force
Set-NetFirewallRule -Name "WinRM-HTTP-In-TCP-Public" -RemoteAddress Any
Enable-WSManCredSSP -Role Server

Do a TCP port scan to make sure the Remote Management port is accessible.

Test-NetConnection -ComputerName target_name -Port 5985

On Windows 10 machine

1. Open PowerShell as Administrator window and run the following two cmdlets.

Set-Item WSMan:\localhost\Client\TrustedHosts -Value "FQDN-Hyper-V-Host"
Enable-WSManCredSSP -Role Client -DelegateComputer "FQDN-Hyper-V-Host"

2. Open Group Policy Editor and configure the following group policy

Computer Configuration > Administrative Template > System > Credentials Delegation, and enable Allow delegating fresh credentials with NTLM-only server authentication and add wsman/FQDN-Hyper-V-Host.

Test it out

Open Hyper-V Manager on Windows 10, right-click “Hyper-V Manager” and choose Connect to Server…

Type in the Hyper-V hostname, Set User with the proper credential, and click OK.

Resources

The post Managing Hyper-V Host from Windows 10 Outside Domain first appeared on KC's Blog.

hyper-v | KC's Blog