Enable the default policy

• Do not perform these steps if you plan to create a common or custom remote access policy, described next.

1. To enable the default policy, do one of the following:
   
   
   • If you use Windows authentication, on the answering router open Routing and Remote Access, and, if necessary, double-click Routing and Remote Access and the server name. (Use Windows authentication for a site-to-site only connection.)
   • If you use RADIUS authentication, on the IAS server open Internet Authentication Service, and, if necessary, double-click Internet Authentication Service. (Use either Windows or RADIUS authentication if the answering router for the site-to-site connection also supports remote access users.)
2. In the console tree, click Remote Access Policies. In the details pane, right-click the default policy Connections to Microsoft Routing and Remote Access server, and then click Properties.
3. Select Grant remote access permission. (The default selection is Deny remote access permission.)