1.
HOB RD VPN 2.x
Basic Training course

2. 1.- Introduction to the training course
1.- Introduction to the training course
Our team
Instructor
Erwin Palma
Introduce your self

3. 1.- Introduction to the training course
1.- Introduction to the training course
Scenario to install
Active Directory
IP:
Domain: mycompany.local
Hostname: PDC
RDP Server
IP:
Domain: mycompany.local
Hostname: rdvpn
3.1 Default Deployment Configuration (Admin Guide)
Clients connect over the Internet to HOB RD VPN using a secure connection encrypted with SSL (TLS) (typically a browser-based HTTPS connection), with HOB RD VPN acting as a gateway for this connection. Once this (external) connection has been established, one or more internal connections are also created. This then gives the clients the possibility to reach their configured targets (for example Windows Remote Desktop Services or HOB Web File Access).
A server must be deployed inside the DMZ where HOB RD VPN can be installed.

4. 2.- Installation and firsts steps with HOB RD VPN 2.x
2.- Installation and firsts steps with HOB RD VPN 2.x
What is inside of HOB RD VPN 2.x
2 Basic Concepts (Admin Guide)
Here you can describe the modules that HOB RD VPN includes

5. 2.- Installation and firsts steps with HOB RD VPN 2.x
2.- Installation and firsts steps with HOB RD VPN 2.x
Cluster - What is inside of HOB RD VPN 2.x
3.2 Cluster Deployment Configuration (Official Adminguide)
A cluster consists of a collection of interconnected computers used to create a common resource pool of servers for the computing needs of the enterprise.
Machines that are linked in a computer cluster can be in different geographical locations. To set up a cluster, install more than one HOB RD VPN server in the DMZ between the Internet and the internal network. The HOB RD VPN Cluster feature supports both high availability and load balancing.

6. 2.- Installation and firsts steps with HOB RD VPN 2.x
2.- Installation and firsts steps with HOB RD VPN 2.x
Server - Hardware
The minimum hardware requirements are:
CPU – minimum: 1 GHz, recommended: 2 GHz
RAM – 2GB
Network card – required; recommended: 100 MBit/s
HDD – minimum: 800 MB hard disk space
Read the chapter 4.1 System Requirements from the official Adminguide

7. 2.- Installation and firsts steps with HOB RD VPN 2.x
2.- Installation and firsts steps with HOB RD VPN 2.x
System Requirements – Windows Operating Systems supported
Microsoft Windows Server Environments (x86, EM64T)
Microsoft Windows Server 2012 R2
Microsoft Windows Server 2012
Microsoft Windows Server 2008 R2
Microsoft Windows Server 2008
Microsoft Windows Desktop Environments (x86, EM64T)
Microsoft Windows Vista
Microsoft Windows 7
Microsoft Windows 8.1
Microsoft Windows 10

8. 2.- Installation and firsts steps with HOB RD VPN 2.x
2.- Installation and firsts steps with HOB RD VPN 2.x
System Requirements - Linux Distributions supported
Linux (x86, EM64T)
SuSe Linux Enterprise Server 11 on Intel EM64
Debian 6
Other distributions supported
Ubuntu
CentOS

9. 2.- Installation and firsts steps with HOB RD VPN 2.x
2.- Installation and firsts steps with HOB RD VPN 2.x
Linux – Special System Requirements
Supported Virtual Machines
VMWare
Supported Virtual Machines with extra configuration
Hyper-v
RedHat VM
Entropy
Clocksources
ADD TABLE About the virtual machines
For more information read the wiki page

10. 2.- Installation and firsts steps with HOB RD VPN 2.x
2.- Installation and firsts steps with HOB RD VPN 2.x
Ports
Port (TCP)
Environment
Function
Note
443
Internet
User portal
Clients from the Internet connect from this port. This port is configurable during installation. 80
HTTP redirector
If clients from the Internet connect to this port, they will be redirected
to the secure Internet access port, and SSL (TLS) will be used.
10000
Network
Administration access
from the intranet
The connection to the administration portal. This port is configurable during installation.
4444
Synchronization with integrated database.
Required for cluster installations.
8989
389
Internal
Integrated directory
service
This port allows communication with the integrated directory service over TCP.
8080
Web File Access
Inter-process communication for Web File Access.
4.2 Prerequisites for Installing Read page 42 …
4.2.1 Preparing the Base Operating System
Ports labelled as Network must be accessible over the company network
Ports labelled as Internet should be accessible from the company network and should be opened in the firewall for access from the Internet
Ports labelled as Internal are accessible only from the HOB RD VPN server host
For cluster installations, the integrated directory service must run on the default port 389 for all cluster members.
For a server installation that conforms to Common Criteria server requirements, all other ports are kept closed.

11. 2.- Installation and firsts steps with HOB RD VPN 2.x
2.- Installation and firsts steps with HOB RD VPN 2.x
Ports Overview
This picture describes the ports in a graphic way.

12. 2.- Installation and firsts steps with HOB RD VPN 2.x
2.- Installation and firsts steps with HOB RD VPN 2.x
Ports Overview
I have created a basic diagram to be used for the admin guy, this diagram shows the basic scenario.

13. 2.- Installation and firsts steps with HOB RD VPN 2.x
2.- Installation and firsts steps with HOB RD VPN 2.x
Checklist
I have created a checklist for the installation

14. 2.- Installation and firsts steps with HOB RD VPN 2.x
2.- Installation and firsts steps with HOB RD VPN 2.x
Installing the HOB RD VPN 2.x
Showtime!

15.
Contact Information
HOB GmbH & Co. KG
Schwadermuehlstraße 3
90556 Cadolzburg
GERMANY

16. Legal Notice HOB GmbH & CO. KG. KG Schwadermuehlstr. 3
90556 Cadolzburg
Represented by: Klaus Brandstätter, Zoran Adamovic
Contact:
Phone:
Fax:
Register of Companies:
Entered in the Registry of Companies, Registry Court: Amtsgericht Fürth, Registration Number: HRA 5180
Tax ID: Sales Tax Identification Number according to Section 27a Sales Tax Act: DE
Responsible for content according to Section 55 Paragraph 2 Interstate Broadcasting Agreement:
Klaus Brandstätter, Zoran Adamovic, Schwadermuehlstr. 3, Cadolzburg
References for all images and graphics used:
All pictures and images included in this publication to which HOB does not hold the copyright must be credited to the current copyright holders.
See section Picture Sources
Disclaimer:
Liability for content
The contents of this publication were created with great care and diligence. While we keep it as up-to-date as practicable, we cannot take any responsibility for the accuracy and completeness of the contents of this publication. As a service provider we are responsible for our own content in this publication under the general laws according to Section 7 paragraph 1 of the TMG. According to Chapters 8 to 10 of the TMG we are not obliged as a service provider to monitor transmitted or stored information not created by us, or to investigate circumstances that indicate illegal activity. Obligations to remove or block the use of information under the general laws remain unaffected. Liability is only possible however from the date of a specific infringement being made known to us. Upon notification of such violations, the content will be removed immediately.
Liability for links
This publication may contain links to external websites over which we have no control. Therefore we can not accept any responsibility for their content. The respective provider or operator of the website pages to which there are links is always responsible for the content of the linked pages. The linked sites were checked at the time of linking for possible violations of the law. At the time the link was created in this publication, no illegal or harmful contents had been identified. A continuous and on-going examination of the linked pages is unreasonable without concrete evidence of a violation. Upon notification of any violations, such links will be removed immediately.
Copyright
The contents and works on these pages created by the author are subject to German copyright law. Reproducing, copying, modifying, adapting, distributing or any kind of exploiting of this material outside the realms of copyright require the prior written consent of the respective author or creator. The downloading of, and making copies of, these materials is only permitted for private, non-commercial use. Where contents of this publication have not been created by the author, the copyright of the third parties responsible for these contents shall be upheld. In particular any contents created by a third party are marked as such. If you become aware of any copyright infringement within this publication, we kindly ask to be provided with this information. Upon notification of any such violation, the concerned content will be removed immediately.