Search for:

- Home
- About
- Speaking
- Shop
- Links
- Subscribe
- Contact
  - Contact
  - Donate
  - Booking
  - Privacy Policy
  - Disclaimer

- Home
- About
- Speaking
- Shop
- Links
- Subscribe
- Contact
  - Contact
  - Donate
  - Booking
  - Privacy Policy
  - Disclaimer

Search for:
May 23 2018 May 23, 2018 July 7, 2019 6 Comments by Thomas Maurer

# How to install VPN on Windows Server 2019

Posted in DirectAccess, Microsoft, Web, Windows, Windows Server, Windows Server 2019, Work

This blog post is a step by step guide how to install and configure VPN on Windows Server 2019. The blog post shows you how you can easily set up a VPN server for a small environment, branch office, or for a hosted server scenario. This VPN (Virtual Private Network) server allows you to connect from remote clients or firewalls to the Windows Server.

I already did a similar post for other versions of Windows

- How to Install VPN on Windows Server 2008 R2
- How to Install VPN on Windows Server 2012
- How to Install VPN on Windows Server 2012 R2
- How to Install VPN on Windows Server 2016

To install VPN access to a Windows Server 2019, simply follow this step by step guide:

## Install Remote Access Role

First, install the “Remote Access” via Server Manager or PowerShell.

Open Server Manager and select Add Roles and Features

Select the Remote Access Role and click next through the wizard.

On the step Role Services, select the DirectAccess and VPN (RAS)

On the final step, select install to install the Remote Access role.

This might requires a reboot of the server.

## Install and Configure VPN on Windows Server 2019

After you have successfully installed, now you can start the wizard to install and configure the VPN server in Windows Server 2019.

After the features are installed, which can take a while to finish, you see the link for the Getting Started Wizard. Click on “Open the Getting Started Wizard“.

This opens a new wizard which will help you to configure the server. On the first screen, select “Deploy VPN only“.

This opens the Routing and Remote Access Management Console

Right click on the Server name and click on “Configure and Enable Routing and Remote Access“.

On the new wizard select “Custom configuration“.

Select “VPN Access“.

After you have click finish, you can now start the Routing and Remote Access service.

## Configure VPN Access Users and Network

If you have a firewall between the internet and your Windows Server you have to open the following Firewall port sand forward them to your Windows Server:

For PPTP: 1723 TCP and Protocol 47 GRE (also known as PPTP Pass-through)
For L2TP over IPSEC: 1701 TCP and 500 UDP
For SSTP: 443 TCP

After the installation Users have to be enabled for Remote Access to connect to your VPN Server. On a standalone server this can be done in the Computer Management MMC, in a domain environment this can be done in the user properties of an Active Directory user.

If you don’t have a DHCP Server in your environment, you have to add a static IP address pool. This is often needed if you have a single server hosted at a service provider. In the properties of your VPN server, you can click on the IPv4 tab and enable and configure the “Static address pool”.

You now have to add an IP address from the same subnet as your static address pool to the network interface of your server so that users can access the server.

I hope this helps you to set up a VPN server in a small environment, lab, or hosted server. You can find more information about Windows Server in the Microsoft Docs.

Tweet
Share
Share
Pin
Reddit
WhatsApp
Email
Buffer

### Related

#### How to Install VPN on Windows Server 2016

This post shows you how you can install a VPN Server on Windows Server 2016 Step-by-Step. It shows you how you can easily setup a VPN server for a small environment or for a hosted server scenario. This blog post covers how you can use Windows Server VPN. This is definitely…

October 21, 2016

#### How to Install VPN on Windows Server 2012 R2

This post shows you how you can install a VPN Server on Windows Server 2012 R2 Step-by-Step. It shows you how you can easily setup a VPN server fro a small environment or for a hosted server scenario. This is definitely not a guide for an enterprise deployment, if you…

January 11, 2014

#### How to Install VPN on Windows Server 2008 R2

This HowTo should show you how to install a VPN Server on Windows Server 2008 R2. This is a HowTo for a small environment or a stand-alone hosted Server. Install the Role "Network Policy and Access Services" with the Server Manager Select the Role Services "Routing and Remote Access Services"…

October 7, 2010

Tags:DirectAccess Install VPN Server on Windows Server Microsoft Remote Access Virutal Private Network VPN VPN Server Windows Server Windows Server 2019 Windows Server 2019 VPN Windows VPN
Next Post
Previous Post

### 6 Responses to How to install VPN on Windows Server 2019

1. John Marcum says:
   October 27, 2018 at 2:30 pm

   Does this configuration work as an always on VPN for Windows 10? I need to test always on VPN in my lab, I was reading a guide on how to install that in Server 2016 and it requires two firewalls which I do not have. Can 2019 work with only 1 firewall?

2. jim says:
   March 29, 2019 at 4:45 am

   Hi, well explained. I have set these up several times and I am having trouble under my first 2019 server so thought there might be a trick (for example, granting permission under NPS) but this is the way to do it and I am having a problem connecting. Will look at my hardware firewall.

3. James Bertram says:
   May 23, 2019 at 5:05 pm

   Any idea of how to get the firewall in the DMZ working? If it is enabled, PPTP and SSTP both get blocked. I even tried creating the rules on top of the built in ones w/ edge transversal enabled, but nothing.

   If I set it to default allow on the DMZ NIC, the connections are allowed so I know it is not the internal NIC at issue. However, I’m not too sure if our ISO auditor will like that solution lol.

4. ryan says:
   July 1, 2019 at 8:22 pm

   Jim- I’m having connection problems too and definitely not the firewall. did you ever get it resolved?

5. Ryan says:
   July 1, 2019 at 8:29 pm

   My specific error: a connection to the remote computer could not be established. ypu might need to change the network settings for this connection.

6. Ryan says:
   July 1, 2019 at 9:59 pm

   found the solution to my issue-

   https://social.technet.microsoft.com/Forums/windowsserver/en-US/0270d377-be3a-4b63-82a0-9df076c5e3b3/upgrade-from-2016-to-2019-breaks-dhcp-relay-agent-when-using-rras?forum=ws2019

### Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

Comment

Name *

Email *

Website

Save my name, email, and website in this browser for the next time I comment.

Notify me of follow-up comments by email.

Notify me of new posts by email.

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Next Post
Previous Post

- ### Follow Me

- ### About

  My name is Thomas Maurer. I am a Senior Cloud Advocate at Microsoft. I am part of the Azure engineering team and engage with the community and customers around the world. I am located in Switzerland. I am focusing on Microsoft technologies, especially cloud and datacenter solutions based on Microsoft Azure, Azure Stack and Windows Server.
  Opinions are my own.

- ### Sponsor

Copyright © 2008-2019 Thomas Maurer

- Home
- About
- Speaking
- Shop
- Booking
- Privacy Policy
- Contact
- Donate
- Subscribe

This site uses cookies: Find out more.
Tweet
Share
Share
Pin
Reddit
WhatsApp
Email
Buffer