How to setup a VPN Server
Ok, so you want to setup a VPN Server, 1st you have to think what OS, Internet Connection (and method, i.e. router or modem on a pc) and a few other things.
First off this tutorial is for Windows XP only.
The Steps
1)On the computer which you want to be the Server (the one people will dial into) go to the Control Panel as shown below.
2)Go to the Network Connection in the Control Panel, as shown below.
3)Now on the left hand side in the Common Task Box, there is a section “Network Tasks”. Click on this option.
4)This will start the wizard to make the VPN connection (server side) Click Next. As shown below.
5)On the next Page Select the “Set up an advanced connection” and click Next.
6)On this page Select “Accept incoming connections” and click Next.
7)On this page click Next. Don’t worry if it says “Direct Parallel” this wont be used.
8)Select the option “Allow virtual private connections” and click Next once again.
9)Now you are going to need to create an account which will be used for connecting to the server. This is done by clicking the Add button and following step 10.
11)This is the setup for adding the user that will be used to access the VPN.
12)This screen will give the options for the Allocation of IP addresses from the people that are connecting. To do this click on the “Internet Protocol” and click “Properties”.
13)On my network I know that IP addresses over 200 are free, so I have selected the range 192.168.1.201-192.168.1.220. If you are running a DHCP server you can let it specify the addresses. If in doubt specify manually as it can be changed later and click OK and click Next on the Window shown
.
14)Now click Finish to Finish the Wizard.
15)If you go back to the “Network Connections” page you can see that there is an icon for “Accept Incoming Connections”.
And that’s the Server Connection all done
Firewall and Router Notes.
The previous bit was the easy bit. First if you are using a Modem and are going to be connecting directly to the computer the modem is on Skip forward a bit. If you are using a Router however this is a different matter, you can do 2 things.
1)Forward the specific ports to the desired Server (Look at the Firewall Section for ports etc.).
2)Set the DMZ(Demilitarized Zone) to the Desired Server. (This means that every connection will be forwarded directly to that PC, which brings me onto the firewall)
Firewall
I use Sygate firewall and here is a tutorial for allowing the correct ports to be allowed and not blocked by the firewall. I’m sure this tutorial could be modified to the certain firewall you are using, if any.
1)Start Sygate and go to the “Advance Rules and Configuration”.
2)Click Add
3)In the General Tab Name the Rule and select “Allow this traffic”
4)Select the Applications Tab
5)Check NTOSKRNL.EXE and TCP/IP Services Application
6)Click OK
7)Click Add
8)In the General Tab Name the Rule and select “Allow this traffic”
9)Select the Ports & Protocols Tab
10)Select TCP in the drop down box
11)Leave the remote box bland, and fill the local box with “135,500,1701,1723” Opening these ports can be dangerous, only open them if you can't get a connection made!
12)Click OK
13)Click Add
14)In the General Tab Name the Rule and select “Allow this traffic”
15)Select the Ports & Protocols Tab
16)Select UDP in the drop down box
17)Leave the remote box bland, and fill the local box with “135,500,1701,1723”
18)Click OK
19)Click Add
20)In the General Tab Name the Rule and select “Allow this traffic”
21)Select the Host Tab
22)Select IP Address and type in your VPN Server address.
23)Click OK
Ok, so you want to setup a VPN Server, 1st you have to think what OS, Internet Connection (and method, i.e. router or modem on a pc) and a few other things.
First off this tutorial is for Windows XP only.
The Steps
1)On the computer which you want to be the Server (the one people will dial into) go to the Control Panel as shown below.
2)Go to the Network Connection in the Control Panel, as shown below.
3)Now on the left hand side in the Common Task Box, there is a section “Network Tasks”. Click on this option.
4)This will start the wizard to make the VPN connection (server side) Click Next. As shown below.
5)On the next Page Select the “Set up an advanced connection” and click Next.
6)On this page Select “Accept incoming connections” and click Next.
7)On this page click Next. Don’t worry if it says “Direct Parallel” this wont be used.
8)Select the option “Allow virtual private connections” and click Next once again.
9)Now you are going to need to create an account which will be used for connecting to the server. This is done by clicking the Add button and following step 10.
11)This is the setup for adding the user that will be used to access the VPN.
12)This screen will give the options for the Allocation of IP addresses from the people that are connecting. To do this click on the “Internet Protocol” and click “Properties”.
13)On my network I know that IP addresses over 200 are free, so I have selected the range 192.168.1.201-192.168.1.220. If you are running a DHCP server you can let it specify the addresses. If in doubt specify manually as it can be changed later and click OK and click Next on the Window shown
14)Now click Finish to Finish the Wizard.
15)If you go back to the “Network Connections” page you can see that there is an icon for “Accept Incoming Connections”.
And that’s the Server Connection all done
Firewall and Router Notes.
The previous bit was the easy bit. First if you are using a Modem and are going to be connecting directly to the computer the modem is on Skip forward a bit. If you are using a Router however this is a different matter, you can do 2 things.
1)Forward the specific ports to the desired Server (Look at the Firewall Section for ports etc.).
2)Set the DMZ(Demilitarized Zone) to the Desired Server. (This means that every connection will be forwarded directly to that PC, which brings me onto the firewall)
Firewall
I use Sygate firewall and here is a tutorial for allowing the correct ports to be allowed and not blocked by the firewall. I’m sure this tutorial could be modified to the certain firewall you are using, if any.
1)Start Sygate and go to the “Advance Rules and Configuration”.
2)Click Add
3)In the General Tab Name the Rule and select “Allow this traffic”
4)Select the Applications Tab
5)Check NTOSKRNL.EXE and TCP/IP Services Application
6)Click OK
7)Click Add
8)In the General Tab Name the Rule and select “Allow this traffic”
9)Select the Ports & Protocols Tab
10)Select TCP in the drop down box
11)Leave the remote box bland, and fill the local box with “135,500,1701,1723” Opening these ports can be dangerous, only open them if you can't get a connection made!
12)Click OK
13)Click Add
14)In the General Tab Name the Rule and select “Allow this traffic”
15)Select the Ports & Protocols Tab
16)Select UDP in the drop down box
17)Leave the remote box bland, and fill the local box with “135,500,1701,1723”
18)Click OK
19)Click Add
20)In the General Tab Name the Rule and select “Allow this traffic”
21)Select the Host Tab
22)Select IP Address and type in your VPN Server address.
23)Click OK