{"id":1976,"date":"2016-12-02T20:04:46","date_gmt":"2016-12-02T20:04:46","guid":{"rendered":"http:\/\/microsoftgeek.com\/?p=1976"},"modified":"2018-09-06T23:15:36","modified_gmt":"2018-09-06T23:15:36","slug":"how-to-setup-a-vpn-server-in-windows-server-2008","status":"publish","type":"post","link":"https:\/\/microsoftgeek.com\/?p=1976","title":{"rendered":"How to setup a VPN Server in Windows Server 2008"},"content":{"rendered":"<p>This article will explain the procedure for setting up a VPN server in Windows Server 2008. The VPN protocol used will be PPTP (Point to Point Tunneling Protocol). The method outlined here uses an environment consisting of an active directory server, a DHCP server, few workstation PCs and a VPN server. Configuration of the VPN server alone is explained in the following steps<\/p>\n<ol>\n<li>Configure IP addresses on the VPN server<\/li>\n<li>Join the VPN server to the domain<\/li>\n<li>Install Network Policy and Access Server Role<\/li>\n<li>Configure Routing and Remote Access<\/li>\n<li>Allow users to login via VPN<\/li>\n<li>Setup a VPN connection on the remote client PC<\/li>\n<\/ol>\n<p>The network topology used in this setup is shown below<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-medium wp-image-1341\" title=\"Network Topology VPN setup Windows Server 2008\" src=\"http:\/\/websistent.com\/wp-content\/uploads\/2011\/11\/win2008_vpn_setup_topology-300x129.png\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" srcset=\"http:\/\/websistent.com\/wp-content\/uploads\/2011\/11\/win2008_vpn_setup_topology-300x129.png 300w, http:\/\/websistent.com\/wp-content\/uploads\/2011\/11\/win2008_vpn_setup_topology.png 733w\" alt=\"win2008 vpn setup topology\" width=\"300\" height=\"129\" \/><\/p>\n<h2 id=\"step1\">Configure IP addresses on the VPN Server<\/h2>\n<p>The VPN server will have two interfaces, private and public with the following IP configuration<\/p>\n<p>private<br \/>\nIP address \u2013 10.0.0.1<br \/>\nSubnet Mask \u2013 255.0.0.0<br \/>\nPreferred DNS \u2013 10.0.0.2 (Assuming DNS runs on the Active Directory Server)<\/p>\n<p>public<br \/>\nObtain the public IP information from your ISP (Internet Service Provider)<\/p>\n<h2 id=\"step2\">Join the VPN server to the domain<\/h2>\n<p>Right Click <em>computer -&gt; Properties -&gt; Change Settings -&gt; Change -&gt; Select Domain<\/em> and enter your domain name you\u2019ll be asked for credentials enter them also and reboot.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-medium wp-image-1342\" title=\"Joining the VPN server to the domain\" src=\"http:\/\/websistent.com\/wp-content\/uploads\/2011\/11\/join_vpn_server_to_domain-253x300.png\" sizes=\"auto, (max-width: 253px) 100vw, 253px\" srcset=\"http:\/\/websistent.com\/wp-content\/uploads\/2011\/11\/join_vpn_server_to_domain-253x300.png 253w, http:\/\/websistent.com\/wp-content\/uploads\/2011\/11\/join_vpn_server_to_domain.png 323w\" alt=\"join vpn server to domain\" width=\"253\" height=\"300\" \/><\/p>\n<h2 id=\"step3\">Install Network Policy and Access Server Role<\/h2>\n<p>Login to the VPN server as the administrator, go to <em>Start -&gt; Administrative Tools -&gt; Server Manager<\/em>. Click Add Roles and Check \u201cNetwork Policy and Access Server\u201d<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-medium wp-image-1343\" title=\"select network policy and access server role\" src=\"http:\/\/websistent.com\/wp-content\/uploads\/2011\/11\/select_network_policy_and_access_server_role-300x223.png\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" srcset=\"http:\/\/websistent.com\/wp-content\/uploads\/2011\/11\/select_network_policy_and_access_server_role-300x223.png 300w, http:\/\/websistent.com\/wp-content\/uploads\/2011\/11\/select_network_policy_and_access_server_role.png 780w\" alt=\"select network policy and access server role\" width=\"300\" height=\"223\" \/><\/p>\n<p>In the role services section check \u201cRouting and Remote Access\u201d<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-medium wp-image-1344\" title=\"select network policy and access server role services\" src=\"http:\/\/websistent.com\/wp-content\/uploads\/2011\/11\/select_network_policy_and_access_server_role_services-300x224.png\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" srcset=\"http:\/\/websistent.com\/wp-content\/uploads\/2011\/11\/select_network_policy_and_access_server_role_services-300x224.png 300w, http:\/\/websistent.com\/wp-content\/uploads\/2011\/11\/select_network_policy_and_access_server_role_services.png 780w\" alt=\"select network policy and access server role services\" width=\"300\" height=\"224\" \/><\/p>\n<p>Confirm your selections and install.<\/p>\n<h2 id=\"step4\">Configure Routing and Remote Access<\/h2>\n<p>After installation Go to <em>Start -&gt; Run and type rrasmgmt.msc<\/em>. In the console that opens right click your server name and click \u201cConfigure and Enable Routing and Remote Access\u201d<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-medium wp-image-1345\" title=\"Configure and Enable Routing and Remote Access\" src=\"http:\/\/websistent.com\/wp-content\/uploads\/2011\/11\/configure_rras-300x223.png\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" srcset=\"http:\/\/websistent.com\/wp-content\/uploads\/2011\/11\/configure_rras-300x223.png 300w, http:\/\/websistent.com\/wp-content\/uploads\/2011\/11\/configure_rras.png 406w\" alt=\"Configure and Enable Routing and Remote Access\" width=\"300\" height=\"223\" \/><\/p>\n<p>In the Wizard that appears click Next and Select Custom Configuration<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-medium wp-image-1346\" title=\"rras custom configuration\" src=\"http:\/\/websistent.com\/wp-content\/uploads\/2011\/11\/rras_custom_configuration-300x246.png\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" srcset=\"http:\/\/websistent.com\/wp-content\/uploads\/2011\/11\/rras_custom_configuration-300x246.png 300w, http:\/\/websistent.com\/wp-content\/uploads\/2011\/11\/rras_custom_configuration.png 504w\" alt=\"rras custom configuration\" width=\"300\" height=\"246\" \/><\/p>\n<p>Select the Check Box VPN access<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-medium wp-image-1347\" title=\"rras vpn access\" src=\"http:\/\/websistent.com\/wp-content\/uploads\/2011\/11\/rras_vpn_access-300x246.png\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" srcset=\"http:\/\/websistent.com\/wp-content\/uploads\/2011\/11\/rras_vpn_access-300x246.png 300w, http:\/\/websistent.com\/wp-content\/uploads\/2011\/11\/rras_vpn_access.png 502w\" alt=\"rras vpn access\" width=\"300\" height=\"246\" \/><\/p>\n<p>Click <em>Next -&gt; Finish<\/em>. In the message box that appears click \u201cStart Service\u201d. If you have a DHCP server configured in the network in the same subnet you can go ahead with the final step.<\/p>\n<p>Networks which have a DHCP server in a different subnet, should have the DHCP relay agent configured. <em>Expand IPv4 -&gt; right click DHCP relay agent<\/em> and go to <em>properties<\/em><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-medium wp-image-1348\" title=\"DHCP relay agent properties\" src=\"http:\/\/websistent.com\/wp-content\/uploads\/2011\/11\/dhcp_relay_agent_properties-250x300.png\" sizes=\"auto, (max-width: 250px) 100vw, 250px\" srcset=\"http:\/\/websistent.com\/wp-content\/uploads\/2011\/11\/dhcp_relay_agent_properties-250x300.png 250w, http:\/\/websistent.com\/wp-content\/uploads\/2011\/11\/dhcp_relay_agent_properties.png 297w\" alt=\"dhcp relay agent properties\" width=\"250\" height=\"300\" \/><\/p>\n<p>In the window that appears enter the IP address of the DHCP server. The appropriate DHCP scope should be configured in the DHCP server.<\/p>\n<p>If your network doesn\u2019t have a DHCP server the VPN server itself can assign IP addresses to VPN clients. Right click your <em>Server name -&gt; properties -&gt; IPv4 tab -&gt; select \u201cstatic address pool\u201d -&gt; click Add<\/em>. Enter the start and end IP ranges.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-medium wp-image-1349\" title=\"RRAS static address pool\" src=\"http:\/\/websistent.com\/wp-content\/uploads\/2011\/11\/rras_static_address_pool-230x300.png\" sizes=\"auto, (max-width: 230px) 100vw, 230px\" srcset=\"http:\/\/websistent.com\/wp-content\/uploads\/2011\/11\/rras_static_address_pool-230x300.png 230w, http:\/\/websistent.com\/wp-content\/uploads\/2011\/11\/rras_static_address_pool.png 402w\" alt=\"RRAS static address pool\" width=\"230\" height=\"300\" \/><\/p>\n<h2 id=\"step5\">Allow users to login via VPN<\/h2>\n<p>On the Active Directory Server go to <em>Start -&gt; Administrative Tools -&gt; Active Directory Users and Computers -&gt; Right Click the properties of an user -&gt; Dial-In tab and click \u201cAllow access\u201d<\/em><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-medium wp-image-1353\" title=\"dialin permissiion\" src=\"http:\/\/websistent.com\/wp-content\/uploads\/2011\/11\/dialin_permissiion-240x300.png\" sizes=\"auto, (max-width: 240px) 100vw, 240px\" srcset=\"http:\/\/websistent.com\/wp-content\/uploads\/2011\/11\/dialin_permissiion-240x300.png 240w, http:\/\/websistent.com\/wp-content\/uploads\/2011\/11\/dialin_permissiion.png 410w\" alt=\"dialin permissiion\" width=\"240\" height=\"300\" \/><\/p>\n<h2 id=\"step6\">Setup a VPN connection on the remote client PC<\/h2>\n<p>On the VPN client PC go to <em>start -&gt; Run and type ncpa.cpl<\/em>, open \u201cNew Connection Wizard\u201d, in the wizard that appears click next and select \u201cConnect to the network at my workplace\u201d<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-medium wp-image-1350\" title=\"vpn connection setup step1\" src=\"http:\/\/websistent.com\/wp-content\/uploads\/2011\/11\/vpn_connection_setup-300x227.png\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" srcset=\"http:\/\/websistent.com\/wp-content\/uploads\/2011\/11\/vpn_connection_setup-300x227.png 300w, http:\/\/websistent.com\/wp-content\/uploads\/2011\/11\/vpn_connection_setup.png 499w\" alt=\"vpn connection setup step1\" width=\"300\" height=\"227\" \/><\/p>\n<p>In the next step select Virtual Private Network Connection.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-medium wp-image-1351\" title=\"vpn connection setup step2\" src=\"http:\/\/websistent.com\/wp-content\/uploads\/2011\/11\/vpn_connection_setup_step2-300x228.png\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" srcset=\"http:\/\/websistent.com\/wp-content\/uploads\/2011\/11\/vpn_connection_setup_step2-300x228.png 300w, http:\/\/websistent.com\/wp-content\/uploads\/2011\/11\/vpn_connection_setup_step2.png 500w\" alt=\"vpn connection setup step2\" width=\"300\" height=\"228\" \/><\/p>\n<p>Enter a company name which is used to name the connection and in the final step enter the IP address of the PUBLIC IP address of the VPN server. After the connection is created enter the username and password of a user in the active directory database and click connect.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-medium wp-image-1352\" title=\"VPN connection credentials\" src=\"http:\/\/websistent.com\/wp-content\/uploads\/2011\/11\/vpn_connection_credentials-285x300.png\" sizes=\"auto, (max-width: 285px) 100vw, 285px\" srcset=\"http:\/\/websistent.com\/wp-content\/uploads\/2011\/11\/vpn_connection_credentials-285x300.png 285w, http:\/\/websistent.com\/wp-content\/uploads\/2011\/11\/vpn_connection_credentials.png 347w\" alt=\"vpn connection credentials\" width=\"285\" height=\"300\" \/><\/p>\n","protected":false},"excerpt":{"rendered":"<p>This article will explain the procedure for setting up a VPN server in Windows Server 2008. The VPN protocol used will be PPTP (Point to Point Tunneling Protocol). The method outlined here uses an environment consisting of an active directory server, a DHCP server, few workstation PCs and a VPN server. Configuration of the VPN [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[16,6],"tags":[],"class_list":["post-1976","post","type-post","status-publish","format-standard","hentry","category-vpn","category-general-2008"],"_links":{"self":[{"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=\/wp\/v2\/posts\/1976","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1976"}],"version-history":[{"count":1,"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=\/wp\/v2\/posts\/1976\/revisions"}],"predecessor-version":[{"id":1977,"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=\/wp\/v2\/posts\/1976\/revisions\/1977"}],"wp:attachment":[{"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1976"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1976"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1976"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}