Demand-dial routing example

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

Demand-dial routing example

This section gives an example of the complexity (and elegance) of demand-dial routing. The following illustration shows the configuration between two offices that want to use demand-dial IP routing.

The Seattle office has a server running Routing and Remote Access that acts as a remote access server and demand-dial router. All computers in the Seattle office are connected to the 172.16.1.0 network (subnet mask 255.255.255.0). The Seattle router (hereafter referred to as Router 1) has a modem connected to its COM1 port and the phone number of the modem is 555-0111.

The New York office has a server running Routing and Remote Access that acts as a remote access server and demand-dial router. All computers in the New York office are connected to the 172.16.2.0 network (subnet mask 255.255.255.0). The New York router (hereafter referred to as Router 2) has a modem connected to its COM2 port and the phone number of the modem is 555-0122.

The user on the computer with the IP address of 172.16.1.10 needs to be able to connect to the user on the computer with the IP address of 172.16.2.20 and vice versa.

Note

• To configure demand-dial routing, use the Demand-dial Interface wizard, and do not skip the Add a Static Route dialog box. For more information about adding a demand-dial interface, see Add a demand-dial interface.

Configuring Router 1

The configuration for demand-dial routing on Router 1 consists of the following three steps:

1. Create a demand-dial interface.

2. Create a static route.

3. Create an account that Router 2 uses when calling Router 1.

Creating a demand-dial interface

By using Routing and Remote Access with the Demand-dial Interface wizard, the administrator at Router 1 creates a demand-dial interface called DD_NewYork with the following configuration:

• Equipment: Modem on COM1

• Phone number: 555-0122

• Protocols: TCP/IP

• Authentication credentials: DD_Seattle with a password

Creating a static route

By using Routing and Remote Access, the Demand-dial Interface wizard will already have the name and destination of the static route with the following configuration:

• Interface: DD_NewYork

• Destination: 172.16.2.0

• Network mask: 255.255.255.0

• Metric: 1

Note

• Because the demand-dial connection is a point-to-point connection, the gateway IP address is not configurable.

Creating an account with dial-in permissions

By using Active Directory Users and Computers or Local Users and Groups, the administrator at Router 1 creates a user account with the following settings:

• Account name: DD_NewYork with a password.

• Account settings: Clear the User must change password at next logon check box and select the Password never expires check box.

The DD_NewYork account is granted dial-in permissions either through the dial-in properties of the user account or through remote access policies. For more information, see Introduction to remote access policies.

Configuring Router 2

The configuration for demand-dial routing on Router 2 consists of the following three steps:

1. Create a demand-dial interface.

2. Create a static route.

3. Create an account that Router 1 uses when calling Router 2.

Creating a demand-dial interface

By using Routing and Remote Access, the administrator at Router 2 creates a demand-dial interface called DD_Seattle with the following configuration:

• Equipment: Modem on COM2

• Phone number: 555-0111

• Protocols: TCP/IP

• Authentication credentials: DD_NewYork with a password

Creating a static route

By using Routing and Remote Access, the Demand-dial Interface wizard will already have the name and destination of the static route with the following configuration:

• Interface: DD_Seattle

• Destination: 172.16.1.0

• Network mask: 255.255.255.0

• Metric: 1

Note

• Because the demand-dial connection is a point-to-point connection, the gateway IP address is not configurable.

Creating an account with dial-in permissions

By using Active Directory Users and Computers or Local Users and Groups, the administrator at Router 2 creates a user account with the following settings:

• Account name: DD_Seattle with a password.

• Account settings: Clear the User must change password at next logon check box and select the Password never expires check box.

The DD_Seattle account is granted dial-in permissions either through the dial-in properties of the user account or through remote access policies. For more information, see Introduction to remote access policies.

The resulting configuration

The following illustration shows the demand-dial routing configuration in terms of the demand-dial interfaces, static routes, and user accounts for the routers for the Seattle and New York offices.

Note

• In order for two-way initiated demand-dial routing to work properly, authentication credentials (such as user account name) for the demand-dial interface must be created on both servers running Routing and Remote Access. This example shows a proper configuration and is summarized in the following table.

  Router	Demand-dial interface name	User account name
  Router 1	DD_NewYork	DD_Seattle
  Router 2	DD_Seattle	DD_NewYork

For more information about how the demand-dial connection process works for this example configuration, see The demand-dial connection process.