This forum is closed. Thank you for your contributions.

Remove From My Forums

How DirectAccess internal servers?

Question
0

Sign in to vote

Hi there,

I proposed a DirectAccess implementation for a company and used step by step guide for implementing it.Everything went OK, I mean the configuration and also i can ping, find IIS's of the external dns and DA server, But my client from the internet can't access the internal servers.And logically how could my internet client ping or access my internal servers as long as my clients dns server is an ext. dns server INET1, which doesn't have internal dns records? Obviously the internal DC knows, but how could INET1 communicate to the DC server in the internal?

Thanks.

Tuesday, August 9, 2011 7:04 AM

Answers

0

Sign in to vote
Hi RasGezae,

This is done with the help of the NRPT table.
(Simply put, it contains domains that should be considered internal and then forwarded to the internal nameservers)

An important question to start though,
Are your DirectAccess deployment based on UAG or not?

If you are using it with UAG you specified a list of domain names that should be considered as internal during your setup of UAG DirectAccess, otherwise you created the entries in your GPO.

Technet articles for designing the DNS Infrastructure for DirectAccess

Non-UAG DirectAccess: http://technet.microsoft.com/en-us/library/ee382323.aspx
Uag DirectAccess: http://technet.microsoft.com/en-us/library/ee428856.aspx

Additional reading:
Without UAG: http://technet.microsoft.com/en-us/magazine/ff394369.aspx
With UAG: http://blog.concurrency.com/infrastructure/uag-sp1-directaccess-config-wizard-infrastructure-servers/

Best wishes,
Jonas Blom
- Proposed as answer by Jonas Blom Wednesday, August 17, 2011 12:27 PM
- Marked as answer by Erez BenariOwner Friday, August 26, 2011 10:36 PM
Tuesday, August 9, 2011 8:25 AM