Learn2hack

•  address learning 
• forward / filter 
• loop avoidance  

• Router Commands Overview

• Configuring the Router 

1.  first we have to install RRAS from   server mgr >> add roles. and install it.  
2. Open the Routing and Remote Access MMC snap-in.
   
3. In the console tree, expand the server name, and then expand IPv4.
   
4. Under IPv4, right-click General, and then select New Routing Protocol.
   
5. Select DHCP Relay Agent, and then click OK.
   
6. Right-click DHCP Relay Agent, and then select New Interface.
   
7. Select the interface that corresponds to the VPN server’s LAN adapter, and then click OK.
   
8. On the General tab, make sure that Relay DHCP packets is selected and then, if necessary, select values for Hop-count threshold and Boot threshold.
   
   
9. Click OK.
   
10. Repeat steps 5 through 8 for the interface to which the remote access clients connect.

Assign a home folder to a domain user

1. Click Start, point to Programs, point to Administrative Tools, and then click Active Directory Users and Computers.
2. In the console tree, click Users.
3. In the Details pane, right-click the user account, and then click Properties.
4. In the Properties dialog box, click Profile.
5. Under the Home folder, type the folder information. To do this, follow these steps:
   1. To assign a home folder on a network server, click Connect, and then specify a drive letter.
   2. In the To box, type a path. This path can be any one of the following types:
   • Network path, for example:
     \\server\users\MrVerma
   • You can substitute username for the last subfolder in the path, for example:
     \\server\users\killer                                       ( killer= user name)
   Note In these examples, server is the name of the file server housing the home folders, and users is the shared folder.
6. Click OK.

Assign a home folder to a local user

1. Click Start, click Control Panel, double-click Administrative Tools, and then double-click Computer Management.
2. In the console tree, click Users in Local Users and Groups.
3. Click the user account.
4. Click the Action menu, and then click Properties.
5. Click the Profile tab, click Connect, and then specify a drive letter.
6. In the To box, type a path. This path can be any of the following types:
   • Network path, for example:
     \\server\users\tester
   • You can substitute username for the last subfolder in the path, for example:
     \\server\users\username
     
     
     Where server is the name of the file server housing the home folders, and where users is the shared folder.
7. Click OK.

Specify a home folder for a terminal server

Domain user account

1. Click Start, point to Programs, point to Administrative Tools, and then click Active Directory Users and Computers.
2. In the console tree, expand the domain node, and then click the Users folder.
3. Double-click the user account.
4. Click the Terminal Services Profile tab.
5. If the Terminal Services home folder is on the local server, click Local path, and then type the path of the profile.
   
   Note If you do not specify the location path in the Terminal Service Home folder pane, the default local home folder is located at the following path:
   system drive\Documents and Settings\username
6. If the Terminal Services home folder is on a network share, click Connect, select a drive to connect, and then type the network path.
7. Click OK.

Local user account

1. Click Start, point to Programs, point to Administrative Tools, and then click Computer Management.
2. In the console tree, click Users in Local Users and Groups.
3. Double-click the user account.
4. Click the Terminal Services Profile tab.
5. If the Terminal Services home folder is on the local server, click Local path, and then type the path of the profile.
   
   Note If you do not specify the location path in the Terminal Service Home folder pane, the default local home folder is located at the following path:
   system drive\Documents and Settings\username
6. If the Terminal Services home folder is on a network share, click Connect, select a drive to connect, and then type the network path.
7. Click OK.

Assign a home folder to a user from the command line

Assign a home folder to a user by using a logon script

Create a logon script

NET USER tester /add /comment:"Example Account for User"
/expires:never 
/homedir:\\Verma\%username%$ 
/profilepath:\\verma\profile

Assign a logon script to a profile

1. Click Start, point to Settings, and then click Control Panel.
2. Double-click Administrative Tools, and then double-click Computer Management.
3. In the console tree, click Local Users and Groups, and then click Users.
4. Click the user account, click Action, and then click Properties.
5. Click Profile, and then type the file name of the script in the Logon script box.
   
   Note: For local accounts, the logon script path is %Systemroot%\System32\Repl\Import\Scripts. However, this folder is not created if you perform a clean installation of Windows Server 2003. If the logon script is stored in a subfolder of the domain controller, type the following login script path before the logon script name:
   sysvol\domainname\scripts

1. Install the Role “Network Policy and Access Services” with the Server Manager 
2. Select the Role Services “Routing and Remote Access Services”
   
3. Configure and Enable Routing and Remote Access in the Server Manager.
   
4. Choose “Custom Configuration” if you just have one Network Interface in the Server
   
5. Choose “VPN access”
   
6. Finish and click next
   
7. Allow access for users “Network Access Permission”. You can set that in de Dial-In Tab under the User Premission.
   
8. Open Ports in your Firewall For PPTP: 1723 TCP 47 GRE
   For L2TP over IPSEC: 1701 TCP 500 UDP
   For  SSTP: 443 TCP

1. Right click on “Routing and Remote Access” and open Properties
   
2. Click on the IPv4 Tab and check “Static address pool”
   
3. Add a static address pool of private IP addresses
   
4. Add secondary IP Address to the Server network interface which is in the same subnet as this pool.