tom-henderson

set service dns dynamic interface pppoe0 service custom-domain host-name <domain>
set service dns dynamic interface pppoe0 service custom-domain login <username>
set service dns dynamic interface pppoe0 service custom-domain password <password>
set service dns dynamic interface pppoe0 service custom-domain protocol noip

tom-henderson

set vpn pptp remote-access authentication mode local
set vpn pptp remote-access authentication local-users username <username> password <password>
set vpn pptp remote-access client-ip-pool start 10.0.3.10
set vpn pptp remote-access client-ip-pool stop 10.0.3.20
set vpn pptp remote-access dns-servers server-1 10.0.0.1

set service dns forwarding options "listen-address=10.0.0.1"

set firewall name WAN_LOCAL rule 30 description “Allow PPTP”
set firewall name WAN_LOCAL rule 30 action accept

tom-henderson

set interfaces ethernet eth0 address 192.168.1.1/24

set service nat rule 4000 description "Modem Access"
set service nat rule 4000 log disable
set service nat rule 4000 outbound-interface eth0
set service nat rule 4000 protocol all
set service nat rule 4000 type masquerade
set service nat rule 4000 destination address 192.168.1.0/24

tom-henderson

function Get-UnlinkedGPOs {
    function IsNotLinked($xmldata){
        If ($xmldata.GPO.LinksTo -eq $null) { 
            Return $true 
        } 
        Return $false 
    } 
 
    $unlinkedGPOs = @() 

tom-henderson

function Get-EmptyGPOs {
    function HasNoSettings{ 
        $cExtNodes = $xmldata.DocumentElement.SelectNodes($cQueryString, $XmlNameSpaceMgr) 
   
        foreach ($cExtNode in $cExtNodes){ 
            If ($cExtNode.HasChildNodes){ 
                Return $false 
            } 
        } 
     

tom-henderson

function Get-EmptyOUs {
    $emptyOus = Get-ADOrganizationalUnit -Filter * -Properties CanonicalName | ForEach-Object {
	   if (-not (Get-ADObject -SearchBase $_ -SearchScope OneLevel -Filter * )) {
      		$_
   	    }
    }
    return $emptyOus
}

tom-henderson

vpn {
    ipsec {
        auto-firewall-nat-exclude enable
        esp-group esp-azure {
            compression disable
            lifetime 3600
            mode tunnel
            pfs disable
            proposal 1 {
                encryption aes256

tom-henderson

# Create the Azure end of an Azure Site to Site VPN

$subscription = 'Visual Studio Enterprise'
$location = 'Australia East'

$resourceGroup = 'RG-Network'

$networkName   = 'VN-Azure'
$networkPrefix = '10.20.0.0/16'

tom-henderson

set vpn ipsec ipsec-interfaces interface pppoe0
set vpn ipsec auto-firewall-nat-exclude enable
set vpn ipsec nat-traversal enable

set vpn ipsec esp-group esp-azure compression disable
set vpn ipsec esp-group esp-azure lifetime 3600
set vpn ipsec esp-group esp-azure mode tunnel
set vpn ipsec esp-group esp-azure pfs disable
set vpn ipsec esp-group esp-azure proposal 1 encryption aes256
set vpn ipsec esp-group esp-azure proposal 1 hash sha1

tom-henderson

$resourceGroup    = 'RG-Network'
$localGatewayName = 'GW-Local'
$localGatewayIP   = $(Resolve-DNS host.example.com).IPAddress

$localGateway = Get-AzureRmLocalNetworkGateway -Name $localGatewayName -ResourceGroupName $resourceGroup
$localAddressSpace = $localGateway.AddressSpaceText | ConvertFrom-Json

$localGateway.GatewayIpAddress = $localGatewayIP

Set-AzureRmLocalNetworkGateway -LocalNetworkGateway $localGateway -AddressPrefix @($localAddressSpace.AddressPrefixes)