Elastic Cloud Gate

AWS Blog

How to setup RRAS SSTP VPN on AWS VPC with Active Directory Authentication – Step by Step – Part 4

In this article we will explain step by step how to setup Windows RRAS SSTP VPN on AWS VPC with Active Directory Authentication.

Part 1 – Setup VPC
Part 2 – Launch EC2 Instance for Active Directory Server and RRAS Server
Part 3 – Setup Active Directory / Domain Controller
Part 4 – Setup RRAS
Part 5 – Configure Active Directory Certificate Service
Part 6 – Configure RRAS
Part 7 – Adjust VPC Configuration
Part 8 – User Computer Configuration

Part 4 – Setup RRAS

1. Go back to RRAS
2. Open Network Sharing Center, click Ethernet, click Properties

RRAS

3. Select Internet Protocol Version 4 and click Properties

RRAS

4. Click Use the following DNS server addresses and enter IP address of DC – in our example 10.20.2.10; click OK; close all Network Sharing Center

RRAS

5. Open Server Manager, go to Local Server and click Computer Name

RRAS

6. Click Change; enter new computer name e.g. RRAS; select Domain and enter your domain name e.g. mydomain.com; click OK

RRAS

7. Enter you domain credentials, click OK
8. You should see Welcome message. Click OK and reboot server

RRAS

9. RDP back to RRAS; login as local admin
10. Go to system and select Advanced system settings

RRAS

11. Go to Remote tab and click Select Users

RRAS

12. Click Add, type your domain user name, click Check Names

RRAS

13. If windows prompt for credential enter you domain admin credential e.g. mydomain\remek
14. Click OK, OK, OK
15. Go to Windows Firewall with Advanced Security

Firewall

16. Click Inbound Rules, click New Rule

Firewall
17. Select Port, click Next

Firewall
18. Select TCP, enter port 443, click Next, Next

Firewall
19. Under name enter SSL, click Finish