network:vpn:setup_vpn_network

Create a VPN network profile: Go to Control Panel > Network and Internet > Connect to a Network > Setup a connection or network > Connect to a workplace > Use my Internet connection (VPN)
Internet address: FQDN or IP Address.
Destination name: identifying name.
Properties (when connecting to network):
- Options:
  - Uncheck “Include Windows logon domain”.
  - Select button < PPP Settings >, check “Enable software compression”.
- Networking:
  - Type of VPN: Automatic.
  - Uncheck “TCP/IPv6”.
  - Press button < Properties > to set preferred DNS server (eg. 192.168.0.100).

* Connect to network: Go to Start > Connect To, and select the VPN connection from the list.

Manage users, select a user, then go to Dial-In, and allow access under “Remote Access Permission (Dial-in or VPN)”.

To add the Remote Access/VPN Server role, go to Start > All Programs > Administrative Tools > Configure Your Server Wizard.
Add the Remote Access/VPN Server role.

On the “Routing and Remote Access Wizard”, select “Virtual Private Network VPN and NAT”.

Choose an IP Address assignment method: Automatically, or from a Range of Addresses.

Setup method of authentication. Recommendation: Do not setup RADIUS server (basically, use Routing and Remote Access to authenticate).

Login to firewall as admin.
Go to Firewall > PPTP VPN.
Set PPTP Settings to “Server”.
Server Settings:
- First IP Address: 192.168.0.240
- Last IP Address: 192.168.0.250
- Require Strong Encryption Enabled
Go to Firewall > Remote User VPN.
Remote Users Settings:
- Allow Remote User VPN Clients: Enabled: Yes
- IP Address Pool: 10.10.1.0 / 255.255.255.0
- Local Network: 192.168.0.0 / 255.255.255.0
- Shared Secret: < a password here > (e.g. foundation)
- Local Identifier
  - Type: Domain Name
  - Identifier: < fully qualified domain name here > (e.g. mycompany.com)
- Remote Identifier
  - Type: Domain Name
  - Identifier: < fully qualified domain name here > (e.g. mycompany.com)
- Block Internet Activity: Enabled: No