Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision 		Previous revision
network:vpn:setup_vpn_network [2009/02/05 16:15]
smayr 		network:vpn:setup_vpn_network [2017/01/12 17:16] (current)
ajdavis [Client Setup]
Line 1: Line 1:
 == Setup VPN Network == == Setup VPN Network ==
  
-=== Client Setup === +== Client Setup == 
- * Create a VPN network profile: Go to Control Panel > Network and Internet > Connect to a Network > Setup a connection or network > Connect to a workplace > Use my Internet connection (VPN) +Install Cisco VPN Client 
- * Internet address: FQDN or IP Address. + * 32bit: version 5.0.07.0290-k9 ({{:network:vpn:vpnclient-win-msi-5.0.07.0290-k9.exe.zip}}) 
- * Destination name: identifying name. + * 64 bit: version 5.0.07.0440-k9 ({{:network:vpn:vpnclient-winx64-msi-5.0.07.0440-k9.exe.zip}})
- * Properties (when connecting to network): +
-    * Options:  +
-       * Uncheck "Include Windows logon domain". +
-       * Select button < PPP Settings >, check "Enable software compression". +
-    * Networking:  +
-       * Type of VPN: Automatic. +
-       * Uncheck "TCP/IPv6". +
-       * Press button < Properties > to set preferred DNS server (eg. 192.168.0.100). +
-     +
- * Connect to network: Go to Start > Connect To, and select the VPN connection from the list.+
  
-=== User Setup === +Note: You have to follow a more complicated procedure on Windows 10.
- * Manage users, select a user, then go to Dial-In, and allow access under "Remote Access Permission (Dial-in or VPN)". +
-{{:network:vpn:vpn-user_properties.jpg|VPN: User profile setup to allow VPN access.}}+
  
-=== Server Setup === +=== Fixes for Windows 10 ===
-==== Using Windows 2003 Server ==== +
- * To add the Remote Access/VPN Server role, go to Start > All Programs > Administrative Tools > Configure Your Server Wizard.  +
- * Add the Remote Access/VPN Server role. +
-{{:network:vpn:vpn_server_roles.jpg|VPN: Server roles to create VPN}} \\ +
-{{:network:vpn:vpn_server_roles_selection_summary.jpg|VPN: Server roles summary}} +
- * On the "Routing and Remote Access Wizard", select "Virtual Private Network VPN and NAT". +
-{{:network:vpn:vpn_rras_configuration.jpg|VPN: Select Virtual Private Network}} +
- * Select network interface that connects server to the Internet. +
-{{:network:vpn:vpn_rras_select_nic.jpg|VPN: Select a network card that connects to the Internet}} +
- * Select the network containing resources needed by external client. +
-{{:network:vpn:vpn_rras_network_selection.jpg|VPN: Select a network containing resources for external client}} +
- * Choose an IP Address assignment method: Automatically, or from a Range of Addresses. +
-{{:network:vpn:vpn_rras_ip_address_choice.jpg|VPN: Select an IP address assignment method}} \\ +
-{{:network:vpn:vpn_rras--address_range.jpg|VPN: Select IP address range}} +
- * Select network adapter that has shared Internet access. +
-{{:network:vpn:vpn_rras_network_selection_2.jpg|VPN: Choose network adapter that connects to Internet}} +
- * Setup method of authentication. Recommendation: Do not setup RADIUS server (basically, use Routing and Remote Access to authenticate). +
-{{:network:vpn:vpn_rras_auth.jpg|VPN: Choose authentication method}}+
  
-Source: [[http://articles.techrepublic.com.com/5100-10878_11-5805260.html]]+==== DNE Patch ==== 
 + # Install the DNE patch ({{network:vpn:dneupdate64.zip}}) 
 + # Install Cisco VPN Client by extracting the files from the executable or running the MSI that gets extracted to the %temp% folder. 
  
-==== Using InstaGateEX Firewall ==== +==== Registry Fix ==== 
- * Login to firewall as admin. +Either apply {{network:vpn:fix_vpn.zip|this}} registry file or follow the instructions below. 
- * Go to Firewall > PPTP VPN. + 
- * Set PPTP Settings to "''Server''". + # Using Regedit navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CVirtA 
- * Server Settings: + # Edit "Display Name" following the pattern "@oem67.inf,%CVirtA_Desc%;Cisco Systems VPN Adapter for 64-bit Windows" to "Cisco Systems VPN Adapter for 64-bit Windows" 
-     * First IP Address: 192.168.0.240 + 
-     * Last IP Address: 192.168.0.250  +== User Setup == 
-     * Require Strong Encryption  Enabled + 
- * Go to Firewall > Remote User VPN. +==== Using Cisco ASDM firewall configuration software ==== 
- * Remote Users Settings: + * Run Cisco ASDM-IDM Launcher and login using the name/password documented in KeePass 
-     * Allow Remote User VPN Clients: ''Enabled: Yes'' + * Click the Configuration button 
-     * IP Address Pool: ''10.10.1.0 /  255.255.255.0'' + * Select the Remote Access VPN tab 
-     * Local Network: ''192.168.0.0 / 255.255.255.0'' + * Expand AAA/Local Users and click the Local Users option 
-     * Shared Secret: < //a password here// > (e.g. ''foundation'')  + * Click the Add button 
-     * Local Identifier + * Fill out the new user's username and password, click the Access Restriction option, "No ASDM, SSH, Telnet of Console access" and then click OK 
-       * Type: ''Domain Name'' + * Click the Apply button and lastly click the Save button to activate the new account
-       * Identifier: < //fully qualified domain name here// > (e.g. ''mycompany.com'') +
-     * Remote Identifier +
-       * Type: ''Domain Name'' +
-       * Identifier: < //fully qualified domain name here// > (e.g. ''mycompany.com'') +
-     * Block Internet Activity: ''Enabled: No'' +
- +
network/vpn/setup_vpn_network.1233868506.txt.gz · Last modified: 2009/02/05 16:15 by smayr
Except where otherwise noted, content on this wiki is licensed under the following license: CC Attribution-Share Alike 4.0 International


  • Show page
  • Old revisions
  • Backlinks
  • Recent Changes
  • Media Manager
  • Sitemap