IPD-DirectAccessversion12.docx

InfrastructureP1.anningandDesignDirectAccessVersion1.2Pub1.ished：October2009Updated：February2010Forthe1.atestinfmution,p1.easeseeCopyrigh1.©2010Micnosof1.Corpora!i.This/X1.1.IanU1.Ueai»IicvsedIo”uUrKkr1.htCrCa1.iYCCoimiiHAttribution1.icense.Toviewaccyofthis1icense.visitorsenda1.ettertoCreativeCoinxis,513HimardStreet.5thF1.oor.SanFranc1.g.CaIifornU,I1O5.ISA.ihenusing(hUk<uwnttIon.providethefo1.1.owingeur1.butfon：InfrestnictuneP1.enningandI2sigIspr>vidvd*i1.hIMMTdtftdEfrxMicrojwftCorporaUon.Thisdocunfnta1.ixisPJmidedU1.youforSnforruUona1.purposeson1.y,andisprovided1.<ynUrtIy*ASIS'.Yruwthedocufniati<xcannothex>dcrstocdas311bstitutinforcustonizodservice411dinfriA>tionthatighibe<k>vcIcpcdbyMicrosoftCorpomt1.onforapjrtIcuUr-rbwiuxnthatuer,8PerHCUIarenv1.jvr11ent.Tothext<ntPend1.Iedby1.*w.V(MSOFTHKKSNOMRRKSTYCfAXYKIXO.D1.SaA1.MSA1.1.EXPRESS.IiF1.IEDKxDSTATnCWY"RRAK11ES.AM>SSWESNO1.1.ABIUTTToYWFOKAMDAMAUiSOFANYHPfIXOCCiI-CT1.CKWn1.THESEMATERIA1.SORAW!XT1.1.ECTVA1.PROfWTVIhiTH四.Microsoftxuyhavepatents,patentdup1.ications,t*ndemrk.orotherinte1.1.ectua1.propertyrightscovcrirsubjectrutter*ithinthis<kun?CItg1.igExceptusprovidedinatcvpara1.eagreenn1.fxMicrosoft,youruseofthisckunjn1.d11esnotgivey<uitny1.icensetothesepatents,trddoinrk£rotherinteHcctWi1.pr<porty.1.nfo11Miinninthisdocunt.inc1.udingUR1.andotherInterneticbsitereferences,itsub.jcc1.tochangevitboutnotice.Vn1.½sotherwisen>ti.theexHf1.eecnjun(es.org)izHtions,pr<duct.Jxh111n。做ge-w11Oddr688熊.)ogo.peop1.e.P1.endeventsdepictedhereinarefictitious.Microeoft.ctivcDirectory.Forcfrent.HyPer-Y.IindfW5.AindaKXServer,andVindorsVistaareeitherreixterdtradrrksortradcmrksofMicrosoftCorponitionintheUnitedStatesand/oroth4>rcountries.Thena>sofXtUii1.c<xpcniesandproductsmntionedhereinWbethetA<kurkoftheirrespectiveowners.YaUhavenocbiRdti<ntogiveMicrosoftanySURgefitioas.cowntsorQtiUJrfeedback<-Feedback")ro1.atinIQthedocur*t4i1.inHOVCVVriy>udoPrGVidt?anyFeed1.wcktoVicj>!of1.IhW1.youprovidet<Micr<Ho11.M1.bCnHchare.tin*rih1.touse.shareandcont?rcia1.izcyearFeedbackinanyVayandforanypurpose.Youa1.sogivetothirdparties,vithoutcharsc.anypatentrightsneededfortheirproducts,tchn<>1.oicsandicestouseorinterfaceAithanyspecificpar1.£ofMien>M>ft5ftufxorserviceH1.H1.inc1.udesIhcFeedtxM-K.YouAiI1.notvve<JbackIhu1.issubjecttoaiicen-wthatrequirvtfMicrosoftto1.icenseitssoftwareor<k»cun?ntationtothirdpartiesbecauseweinc1.udeyourFeedbackinthen.ContentsTbeP1.annincandDesignSeriesApproach1Introduct100totheDirectAccessGuide2DiiwctAcceMinMicrosoftInfr*trcturOpt1.BiMtion3DirectAcceMDeeignProcss4Step1：DefinetheScopeoftheDirectAcceMProject7Step2:DeteraineNetworkRdquireMnte9Stp3:DesignDirctAccssServerInfrutnicture13Step4：DeeienIebServersandCertificateInfrastructure16D1.rectAcceMandIi1.croeoftForefrontUnifiedAccessGatevay20Conc1.usion21AppendixA：JobAids22AppendixB:DirectAcceasCcwooenteataG1.ance24VersionH1.tory27Acknov1.ed0Mt428TheP1.anningandDesignSeriesApproachThisguideisoneinHseriesofp1.anninganddesignguidesthatc1.arifyandstream1.inethep1.anninganddesignprocessforMicrosofteinfrast11ctretechno1.ogies.Eachguideintheseriesaddressesauniqueinfrastructuretechno1.ogyorscenario.Theseguidesinc1.udethefo1.1.ovingtopics： Definingthetechnica1.decisionf1.ow(f1.owchart)throughthep1.anningprocess. Ascribingthedecisionst。beIUIdCandtheCgnOnIyavaiIab1.eop1.ionstoconsiderinmakingIhcdecisions. Re1.atingthedecisionsandoptionstothebusinessintermsofCoSco11p1.exity,andothercharacteristics. Franingthedecisioninternsofadditiona1.questionstothebusinesstoensurecomprehensiveunderstandingoftheappropriatebusiness1.andscape.TheguidesinthisseriesareintendedtocopIemcntandaugnenttheproductdocumentation.BenefitsofUsingThisGuideUsingthisguidevi11he1.panorganizationtop1.anthebestarchitectureforthebusinessandtode1.iverthenoS1.cost-effectiveMicrosoftDirectAccesstechno1.ogy.BenefitsforBusinessStakeho1.dersZDecisionMakers： Mostcost-effectivedesignso1.utionforauimp1.ementation.Infr<i5tructureP1.anningandDCSign(IPD)c1.ininatesover-architectingandoverspendingbyprecise1.ymatchingthetechno1.ogyso1.utiontothebusinessneeds. AIignmembetweenthebusinessandITfro®thebeginningofthedesignprocesstotheend.BenefitsforInfrastructureStakeho1.dersZDecisionMekers： Authoritativeguidance.Microsofti$thebestsourceforguidanceaboutthedesignofMicrosoftproducts. Businessva1.idationquestionstoensuretheso1.utionmeetstherequirerentsofbothbusinessandinfrastructurestakeho1.ders. Highintegritydesigncriteriathatinc1.udesproduct1.imitations. Fau1.t-to1.erantinfrastructurewherenecessary. Proportionjitesystemandnetworkavai1.abi1.itytomeetbusinessrcquirce11ts.Infrastructureth<tissizedappropriate1.ytoneetbusinessrequirenents.BenefitsforConsu1.tantsorPartners: Rapidreadinessforconsu1.tingengagenents. P1.anninganddesigntcwp1.atetostandard