Step 1: Plan an Advanced Single Server Deployment
Applies To: Windows Server 2012 R2, Windows Server 2012
The first step in deploying Windows Server® 2012 Remote Access in a multisite topology is to plan and configure an advanced single server deployment, and then plan to add servers to each multisite entry point.
Plan a single server deployment
Before you deploy Remote Access in a multisite topology, make sure that you have completed all the planning steps to deploy a single Remote Access server. See Plan an Advanced DirectAccess Deployment. Note the following:
The single Remote Access server must be configured to use IPsec client certificate authentication. The option to use the Remote Access server as a Kerberos proxy for client authentication is not supported.
The single server deployment should use a certification authority (CA) to issue the certificate for the network location server and IP-HTTPS websites.
If you have already deployed a single Remote Access without these settings, configure them before beginning the multisite deployment.