Please see the revised section at the bottom as the original question seems to have been a little convoluted
I have a cloud based virtual machine from my client's hosting company. The sole purpose of the VM instance is for the clients public facing ASP.net web site.
The VM instance had just a bare installation of Windows Server 2008 R2 on it and I installed the following:
- IIS
- Network Policy and Access Server
- MSSQL 2012
I am able to remote desktop and connect to MSSQL remotely as I have opened the respective firewall ports via the hosting company control panel firewall.
Recently, I have noticed that there is a group of computers with IP addresses all over the world attempting to brute-force the Administrator
and sa
account. I subsequently disabled both of those accounts as a precaution and do not plan on re-enabling them. However, the repeated brute force continues on these accounts.
I tried to set up VPN access on the Windows Server but can not get it working. I followed the tutorials: here and here and here..
When I try to connect via VPN I notices the following messages in the event viewer:
Unable to contact a DHCP server. The Automatic Private IP Address 169.254.xxx.xx will be assigned to dial-in clients. Clients may be unable to access resources on the network.
This indicates that DHCP was not installed. When I go to install DHCP I am presented with so many options it is beyond me.
So, my questions is: Since I have a working live client ASP.net application running on the VM instance with a fixed IP (4x.2x.13x.xx) / www.clientssite.com
. Will installing the DHCP role potentially mess-up / take down the live site? Will DHCP keep my site working under IIS and I can just create the DHCP with a range of something like 10.9.8.10 to 10.9.8.50 ? Is this likely to fix my VPN connection issue which is the ultimate goal.
REVISED QUESTION
I have a cloud based virtual machine running Windows Server 2008R2.
- Dedicated IP address (from my hosting company) 46.130.22.99
- Gateway IP: 46.130.22.1
- DNS: 81.17.240.194
- Roles installed: Application Server, Web Server, Network Policy and Access Services (with just Routing and Remote Services, Remote Access Services and Routing)
In the Routing and Remote Services
I have added a static address pool from 46.130.22.5
to 46.130.22.9
When I try to establish a VPN connection to the server it just stalls and then shows a message saying
Error 800: The remote connection was not made because the attempted VPN tunnel fails..
Is there something else I need to do to set this up?
SCREENSHOTS
IPCONFIG OUTPUT
Windows IP Configuration
Host Name . . . . . . . . . . . . : removed
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : Yes
WINS Proxy Enabled. . . . . . . . : No
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Xen Net Device Driver
Physical Address. . . . . . . . . : 00-16-3E-08-9B-64
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::193b:c0b:7cc0:daeb%14(Preferred)
IPv4 Address. . . . . . . . . . . : 46.22.130.99(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.254.0
Default Gateway . . . . . . . . . : 46.22.130.1
DHCPv6 IAID . . . . . . . . . . . : 285218366
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-18-AF-1C-90-00-16-3E-08-9B-64
DNS Servers . . . . . . . . . . . : 81.17.240.194
NetBIOS over Tcpip. . . . . . . . : Enabled
Tunnel adapter isatap.{184042A4-4F78-48AE-8BC9-A37E53E8D556}:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft ISATAP Adapter
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Tunnel adapter Local Area Connection* 9:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft Teredo Tunneling Adapter
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv6 Address. . . . . . . . . . . : 2001:0:9d38:953c:248b:25e4:d1e9:7d9c(Pref
erred)
Link-local IPv6 Address . . . . . : fe80::248b:25e4:d1e9:7d9c%10(Preferred)
Default Gateway . . . . . . . . . :
NetBIOS over Tcpip. . . . . . . . : Disabled
Tunnel adapter 6TO4 Adapter:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft 6to4 Adapter
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv6 Address. . . . . . . . . . . : 2002:2e16:8263::2e16:8263(Preferred)
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : 81.17.240.194
NetBIOS over Tcpip. . . . . . . . : Disabled
4x.2x.13x.1
and my site's ip is4x.2x.13x.9x
. Could I create a static IP e.g.4x.2x.13x.2
?10.9.8.7
to10.9.8.9
under theIPV4 Address Pool
section in Routing and Remote Access but my VPN connection still comes up with an error connecting:Error 800: The remote connection was not made because the attempted VPN tunnel fails. The VPN server might be unreachable. ...