Several prerequisites must be in place before proceeding with this documentation. In addition to the assumptions outlined earlier in this document, it is assumed that the LoadMaster has been configured and that network connectivity to all networks has been validated. In addition, the following prerequisites must be in place before continuing.

  • A public hostname for the VPN server that resolves to the IP address assigned to the VPN virtual service (or edge firewall if the LoadMaster is in a perimeter or DMZ network).
  • An SSL certificate with a subject name that matches the VPN server’s public hostname.
  • Each VPN server must be configured to assign unique IP addresses to its clients. Using DHCP for VPN client address assignment when there is more than one VPN server in a cluster is not supported.
  • An internal hostname for the NPS cluster that resolves to the IP address assigned to the NPS virtual service.