Firstly my background is more skewed towards programming rather than network maintenance so please bear with me. OK here's the problem..
I have 5 physical servers co-located in a data-center. Each server is utilising two network adapters to connect them to a private LAN and the other is configured with a public IP. For general maintenance I am connecting to these machines over the public IP on port 3389 using Remote Desktop. I am also using IPSec to limit access to a handful of trusted IPs.
My problem is that every new server I add using this setup requires it's own public IP. It's also very tedious manually configuring IPSec each time. I'm sure there's a better way to handle this?
Is there any role/feature within Windows Server 2012 that will allow me to just keep one public IP open and access all machines indirectly via one server? I suppose I can RDP into machine and then RDP from there over the LAN into each of the other servers but this gets a bit messy.
Any recommendations would be much appreciated.
I should add that my servers are connected together over a L2 switch so I have no ability to forward ports. One suggestion I saw was to forward ports 3390, 3391 and so forth to each server in the farm but without a router I don't think this will be an option.