{"id":137,"title":"Windows Server Routing ve VPN","content":"Windows Server i\u015fletim sistemleri, kurumsal a\u011flarda y\u00f6nlendirme (routing) ve Sanal \u00d6zel A\u011f (VPN) hizmetlerini sa\u011flamak i\u00e7in g\u00fc\u00e7l\u00fc \u00f6zellikler sunar. Bu yaz\u0131da, Windows Server'da Routing ve Remote Access Service (RRAS) kullanarak y\u00f6nlendirme ve VPN yap\u0131land\u0131rmalar\u0131n\u0131 detayl\u0131 olarak ele alaca\u011f\u0131z. <h2>Routing and Remote Access Service (RRAS) Nedir?<\/h2> RRAS, Windows Server'\u0131n a\u011f y\u00f6nlendirme ve uzaktan eri\u015fim i\u015flemlerini y\u00f6netmek i\u00e7in kulland\u0131\u011f\u0131 temel servistir. Bu servis sayesinde Windows Server: <ul> <li>Farkl\u0131 a\u011f segmentleri aras\u0131nda y\u00f6nlendirme yapabilir<\/li> <li>VPN sunucusu olarak \u00e7al\u0131\u015fabilir<\/li> <li>NAT (Network Address Translation) hizmeti sa\u011flayabilir<\/li> <li>Dial-up ba\u011flant\u0131lar\u0131 y\u00f6netebilir<\/li> <\/ul> <h2>Routing (Y\u00f6nlendirme) \u00d6zellikleri<\/h2> Windows Server, birden fazla a\u011f arabirimi olan bir bilgisayarda y\u00f6nlendirici olarak \u00e7al\u0131\u015fabilir. Bu, farkl\u0131 alt a\u011flar aras\u0131nda trafik ge\u00e7i\u015fini sa\u011flar. <h3>Y\u00f6nlendirici Kurulumu<\/h3> <ol> <li><strong>RRAS Rol\u00fcn\u00fc Y\u00fckleme<\/strong>: <ul> <li>Server Manager &gt; Add Roles and Features<\/li> <li>Remote Access rol\u00fcn\u00fc se\u00e7in<\/li> <li>Routing alt \u00f6zelli\u011fini i\u015faretleyin<\/li> <\/ul> <\/li> <li><strong>RRAS Servisini Yap\u0131land\u0131rma<\/strong>: <ul> <li>Server Manager &gt; Tools &gt; Routing and Remote Access<\/li> <li>Sunucuya sa\u011f t\u0131klay\u0131n ve \"Configure and Enable Routing and Remote Access\" se\u00e7in<\/li> <li>\"Custom Configuration\" se\u00e7in<\/li> <li>\"LAN routing\" se\u00e7ene\u011fini i\u015faretleyin<\/li> <\/ul> <\/li> <li><strong>Statik Rotalar Ekleme<\/strong>: <ul> <li>RRAS konsolunda, IPv4 &gt; Static Routes'a sa\u011f t\u0131klay\u0131n<\/li> <li>\"New Static Route\" se\u00e7in<\/li> <li>Hedef a\u011f\u0131, alt a\u011f maskesini, a\u011f ge\u00e7idini ve metrik de\u011ferini girin<\/li> <\/ul> <\/li> <\/ol> <h3>RIP (Routing Information Protocol) Yap\u0131land\u0131rma<\/h3> Windows Server, dinamik y\u00f6nlendirme protokol\u00fc olarak RIP'i destekler: <ol> <li>RRAS konsolunda, General &gt; New Routing Protocol se\u00e7in<\/li> <li>RIP Version 2 for Internet Protocol'\u00fc se\u00e7in<\/li> <li>Arabirim \u00f6zelliklerini (kimlik do\u011frulama, g\u00fcncelleme s\u0131kl\u0131\u011f\u0131 vb.) yap\u0131land\u0131r\u0131n<\/li> <\/ol> <h3>NAT (Network Address Translation)<\/h3> NAT, \u00f6zel IP adreslerini kullanarak i\u00e7 a\u011fdaki cihazlar\u0131n internet eri\u015fimini sa\u011flar: <ol> <li>RRAS yap\u0131land\u0131rma sihirbaz\u0131nda \"Network Address Translation (NAT)\" se\u00e7in<\/li> <li>\u0130nternet ba\u011flant\u0131s\u0131 i\u00e7in kullan\u0131lacak a\u011f arabirimini se\u00e7in<\/li> <li>\u0130\u00e7 a\u011f arabirimini se\u00e7in<\/li> <\/ol> <h2>VPN (Virtual Private Network) \u00d6zellikleri<\/h2> Windows Server, \u00e7e\u015fitli VPN protokollerini destekleyen g\u00fc\u00e7l\u00fc bir VPN sunucusu olarak yap\u0131land\u0131r\u0131labilir. <h3>Desteklenen VPN Protokolleri<\/h3> <ul> <li><strong>PPTP (Point-to-Point Tunneling Protocol)<\/strong>: Kurulumu kolay ancak g\u00fcvenli\u011fi s\u0131n\u0131rl\u0131<\/li> <li><strong>L2TP\/IPsec (Layer 2 Tunneling Protocol with IPsec)<\/strong>: Daha g\u00fcvenli, sertifika tabanl\u0131 kimlik do\u011frulama<\/li> <li><strong>SSTP (Secure Socket Tunneling Protocol)<\/strong>: SSL \u00fczerinden t\u00fcnel olu\u015fturur, g\u00fcvenlik duvar\u0131 dostu<\/li> <li><strong>IKEv2 (Internet Key Exchange version 2)<\/strong>: Mobil cihazlar i\u00e7in iyi, ba\u011flant\u0131 kesintilerinde otomatik yeniden ba\u011flanma<\/li> <\/ul> <h3>VPN Sunucusu Kurulumu<\/h3> <ol> <li><strong>RRAS Rol\u00fcn\u00fc Y\u00fckleme<\/strong>: <ul> <li>Server Manager &gt; Add Roles and Features<\/li> <li>Remote Access rol\u00fcn\u00fc se\u00e7in<\/li> <li>DirectAccess and VPN (RAS) alt \u00f6zelli\u011fini i\u015faretleyin<\/li> <\/ul> <\/li> <li><strong>RRAS Servisini Yap\u0131land\u0131rma<\/strong>: <ul> <li>Server Manager &gt; Tools &gt; Routing and Remote Access<\/li> <li>Sunucuya sa\u011f t\u0131klay\u0131n ve \"Configure and Enable Routing and Remote Access\" se\u00e7in<\/li> <li>\"Remote access (dial-up or VPN)\" se\u00e7in<\/li> <li>\"VPN\" se\u00e7ene\u011fini i\u015faretleyin<\/li> <li>A\u011f ba\u011flant\u0131s\u0131 i\u00e7in kullan\u0131lacak arabirimi se\u00e7in<\/li> <\/ul> <\/li> <li><strong>IP Adresi Atama Yap\u0131land\u0131rmas\u0131<\/strong>: <ul> <li>Otomatik IP atamas\u0131 i\u00e7in DHCP sunucusu kullan\u0131n veya<\/li> <li>Statik adres havuzu tan\u0131mlay\u0131n<\/li> <\/ul> <\/li> <li><strong>Kimlik Do\u011frulama Y\u00f6ntemlerini Yap\u0131land\u0131rma<\/strong>: <ul> <li>RRAS konsolunda, Sunucu &gt; Properties &gt; Security sekmesi<\/li> <li>Desteklenen kimlik do\u011frulama y\u00f6ntemlerini se\u00e7in (MS-CHAPv2, EAP vb.)<\/li> <\/ul> <\/li> <li><strong>VPN Protokollerini Yap\u0131land\u0131rma<\/strong>: <ul> <li>RRAS konsolunda, Sunucu &gt; Properties &gt; PPP sekmesi<\/li> <li>\u0130stenen VPN protokollerini etkinle\u015ftirin\/devre d\u0131\u015f\u0131 b\u0131rak\u0131n<\/li> <\/ul> <\/li> <\/ol> <h3>VPN \u0130stemci Yap\u0131land\u0131rmas\u0131<\/h3> Windows istemcileri i\u00e7in VPN ba\u011flant\u0131s\u0131 olu\u015fturma: <ol> <li>A\u011f ve \u0130nternet Ayarlar\u0131 &gt; VPN &gt; VPN Ba\u011flant\u0131s\u0131 Ekle<\/li> <li>VPN sunucusunun ad\u0131n\u0131 veya IP adresini girin<\/li> <li>VPN t\u00fcr\u00fcn\u00fc se\u00e7in (PPTP, L2TP\/IPsec, SSTP, IKEv2)<\/li> <li>Kimlik do\u011frulama bilgilerini girin<\/li> <\/ol> <h2>Always On VPN<\/h2> Always On VPN, DirectAccess'in modern alternatifi olarak Windows 10 ve Windows 11 istemcileri i\u00e7in tasarlanm\u0131\u015f bir \u00f6zellikdir. <h3>Always On VPN Avantajlar\u0131<\/h3> <ul> <li>Kullan\u0131c\u0131 oturum a\u00e7madan \u00f6nce otomatik ba\u011flant\u0131<\/li> <li>Se\u00e7ici t\u00fcnelleme (split tunneling) deste\u011fi<\/li> <li>Uygulama tabanl\u0131 VPN trafi\u011fi y\u00f6nlendirme<\/li> <li>Geli\u015fmi\u015f trafik filtreleme<\/li> <li>Windows ve \u00fc\u00e7\u00fcnc\u00fc parti VPN istemcileri ile uyumluluk<\/li> <\/ul> <h3>Always On VPN Kurulumu<\/h3> <ol> <li><strong>Sertifika Altyap\u0131s\u0131 Haz\u0131rlama<\/strong>: <ul> <li>NPS (Network Policy Server) i\u00e7in sunucu sertifikas\u0131<\/li> <li>VPN istemcileri i\u00e7in istemci sertifikalar\u0131<\/li> <\/ul> <\/li> <li><strong>NPS Yap\u0131land\u0131rmas\u0131<\/strong>: <ul> <li>RADIUS sunucusu olarak NPS'yi yap\u0131land\u0131r\u0131n<\/li> <li>VPN ba\u011flant\u0131lar\u0131 i\u00e7in politikalar olu\u015fturun<\/li> <\/ul> <\/li> <li><strong>VPN Profili Olu\u015fturma ve Da\u011f\u0131tma<\/strong>: <ul> <li>PowerShell veya Intune kullanarak VPN profili olu\u015fturun<\/li> <li>Group Policy veya MDM \u00e7\u00f6z\u00fcmleri ile profili da\u011f\u0131t\u0131n<\/li> <\/ul> <\/li> <\/ol> <h2>G\u00fcvenlik En \u0130yi Uygulamalar\u0131<\/h2> <ol> <li><strong>G\u00fc\u00e7l\u00fc Kimlik Do\u011frulama Kullan\u0131n<\/strong>: <ul> <li>L2TP\/IPsec veya IKEv2 gibi g\u00fcvenli protokoller tercih edin<\/li> <li>M\u00fcmk\u00fcnse \u00e7ok fakt\u00f6rl\u00fc kimlik do\u011frulama kullan\u0131n<\/li> <\/ul> <\/li> <li><strong>D\u00fczenli G\u00fcncellemeler<\/strong>: <ul> <li>Windows Server'\u0131 ve RRAS bile\u015fenlerini g\u00fcncel tutun<\/li> <li>G\u00fcvenlik yamalar\u0131n\u0131 zaman\u0131nda uygulay\u0131n<\/li> <\/ul> <\/li> <li><strong>Eri\u015fim Kontrol\u00fc<\/strong>: <ul> <li>VPN eri\u015fimini k\u0131s\u0131tlay\u0131c\u0131 politikalarla s\u0131n\u0131rlay\u0131n<\/li> <li>Kullan\u0131c\u0131 gruplar\u0131na g\u00f6re eri\u015fim haklar\u0131 tan\u0131mlay\u0131n<\/li> <\/ul> <\/li> <li><strong>Trafik \u015eifreleme<\/strong>: <ul> <li>En g\u00fc\u00e7l\u00fc \u015fifreleme algoritmalar\u0131n\u0131 kullan\u0131n<\/li> <li>IPsec ile ek g\u00fcvenlik katman\u0131 ekleyin<\/li> <\/ul> <\/li> <li><strong>G\u00fcnl\u00fck Tutma ve \u0130zleme<\/strong>: <ul> <li>VPN ba\u011flant\u0131lar\u0131n\u0131 ve y\u00f6nlendirme faaliyetlerini g\u00fcnl\u00fckleme<\/li> <li>Anormal trafik i\u00e7in alarmlar olu\u015fturun<\/li> <\/ul> <\/li> <\/ol> <h2>Sorun Giderme Ara\u00e7lar\u0131<\/h2> <ol> <li><strong>Event Viewer<\/strong>: RRAS olaylar\u0131n\u0131 g\u00f6r\u00fcnt\u00fclemek i\u00e7in<\/li> <li><strong>Netsh<\/strong>: A\u011f yap\u0131land\u0131rmas\u0131 ve tan\u0131lama i\u00e7in<\/li> <li><strong>Network Monitor veya Wireshark<\/strong>: Paket yakalama ve analiz<\/li> <li><strong>PathPing ve Tracert<\/strong>: Y\u00f6nlendirme sorunlar\u0131n\u0131 te\u015fhis etmek i\u00e7in<\/li> <\/ol> <h2>\u0130leri Seviye Senaryolar<\/h2> <h3>Site-to-Site VPN<\/h3> \u0130ki veya daha fazla fiziksel konum aras\u0131nda g\u00fcvenli bir t\u00fcnel olu\u015fturur: <ol> <li>RRAS'ta \"Router\" rol\u00fcn\u00fc se\u00e7in<\/li> <li>Demand-dial interface olu\u015fturun<\/li> <li>Kar\u015f\u0131 taraftaki VPN sunucusuna ba\u011flant\u0131 bilgilerini yap\u0131land\u0131r\u0131n<\/li> <li>Statik rotalar veya y\u00f6nlendirme protokolleri yap\u0131land\u0131r\u0131n<\/li> <\/ol> <h3>\u00c7oklu A\u011f Y\u00f6nlendirme<\/h3> Birden fazla WAN ba\u011flant\u0131s\u0131 ve karma\u015f\u0131k y\u00f6nlendirme senaryolar\u0131 i\u00e7in: <ol> <li>Birden fazla a\u011f kart\u0131 veya arabirim yap\u0131land\u0131r\u0131n<\/li> <li>Farkl\u0131 metrik de\u011ferleriyle statik rotalar tan\u0131mlay\u0131n<\/li> <li>Trafik \u00f6nceliklendirme ve y\u00fck dengeleme yap\u0131land\u0131r\u0131n<\/li> <\/ol> Windows Server, RRAS hizmeti ile kurumsal a\u011flarda hem y\u00f6nlendirme hem de VPN i\u015flevleri i\u00e7in g\u00fc\u00e7l\u00fc bir \u00e7\u00f6z\u00fcm sunar. Basit kurulumlardan ileri seviye yap\u0131land\u0131rmalara kadar \u00f6l\u00e7eklenebilir olmas\u0131, bir\u00e7ok senaryo i\u00e7in uygun bir \u00e7\u00f6z\u00fcm olmas\u0131n\u0131 sa\u011flar. G\u00fcvenlik en iyi uygulamalar\u0131 ve d\u00fczenli bak\u0131m ile, Windows Server tabanl\u0131 routing ve VPN hizmetleri, uzaktan \u00e7al\u0131\u015fma, \u015fube ofisleri ve hibrit a\u011f ortamlar\u0131 i\u00e7in g\u00fcvenilir bir altyap\u0131 olu\u015fturabilir.","excerpt":"Windows Server i\u015fletim sistemleri, kurumsal a\u011flarda y\u00f6nlendirme (routing) ve Sanal \u00d6zel A\u011f (VPN) hizmetlerini sa\u011flamak i\u00e7in g\u00fc\u00e7l\u00fc...","created_at":"2025-04-02 22:01:07","updated_at":"2026-09-07 18:25:50","category_id":8,"view_count":694,"reading_time":6,"status":"published","editor_choice":0,"is_editor_choice":0,"published_at":"2025-04-02 22:01:07","featured_image":"resimyok.jpg","slug":"windows-server-routing-ve-vpn","category_name":"Active Directory \/Azure","category_slug":"active-directory-azure"}