Setting up a Virtual Private Network

1. Introduction
1. What is VPN?

From webopedia:

Short for virtual private network, a network that is constructed by using public wires to connect nodes. For example, there are a number of systems that enable you to create networks using the Internet as the medium for transporting data. These systems use encryption and other security mechanisms to ensure that only authorized users can access the network and that the data cannot be intercepted.

Basically a VPN connection is a way of securely making it seem like your computer is connected to a local network, such as the Physics Astronomy building LAN (and the PHY-AST domain) even if you are not directly connected to it.

2. Why Use VPN?

If you are away from a local network or domain and still want to access shared or personal files stored on that network or domain, VPN is perfect. A VPN connection can be made across the internet from a dial-up, broadband or LAN connection and uses encryption to maintain security.

2. Windows 98


1. Setting Up a Connection


1. Adding the VPN Adapter

Creating a VPN connection in Windows 98 requires first that you have the Microsoft VPN adapter installed. It is installed by default however someone or something may have removed it from your system. To check, right-click on Network Neighborhood on your desktop and choose Properties. If you see Microsoft Virtual Private Networking Adapter in the list of devices, then it is already installed, and you can skip down to the next item. If not, you will need to click Add, then choose Adapter and click Add, and then select Microsoft from the left column, and Microsoft Virtual Private Networking Adapter from the right column. Click Ok and the VPN adapter will be installed. You may need to insert your Windows 98 CD-ROM. You will be asked to reboot after you click Ok from the Network Properties panel. Do so.

2. Configuring VPN

After the VPN adapter is installed, go to Dial-Up Networking found under My Computer on the Desktop. Double click Make New Connection This will bring up a dialog box where you can enter a name for your connection and choose the device to connect thru. The name you give your connection does not matter. Your only choice for device should be Microsoft VPN Adapter. Make sure it is chosen and click Next. You will then need to enter a host name or IP address for the connection (see below: PA VPN Status). Enter one of these and click Next, and then Finish. You will be prompted to install the Microsoft Dial-Up Adapter. You may need to insert your Windows 98 CD-ROM. Once this is done, your adapter is installed, but a few configuration changes remain.

Go back to Dial-Up Networking found under My Computer on the Desktop. Right click on your connection and choose Properties, and select the Server Types tab. Make sure only Log on to Network, Enable Software Compression, and TCP/IP are checked. Click Ok and your configuration is done!

2. Using VPN

To use the VPN Connection, go to Dial-Up Networking found under My Computer on the Desktop. Double click on your connection, and enter your username and password and click Connect.

3. Windows NT 4.0


1. Setting Up a Connection

To install VPN in Windows NT, first you must make sure you are logged into the machine in question with an account with administrative access. To start, first right-click on Network Neighborhood on your desktop and choose Properties. From the window that pops up choose the Protocols tab, click Add, and choose Point to Point Tunneling Protocol from the list. Click Ok. At this point you will need to insert your Windows NT 4 Workstation CD-ROM. Do so and make sure the dialog box is pointing to the correct drive. Choose 1 when prompted for the number of Virtual Private Networks. RAS (Remote Access Service) will then be installed automatically. Once files are copied, click Ok from the dialog box that pops up and then Continue from the next one. If other devices are present in the list, make sure either VPN Adaptor or Virtual Private Networking Adapter is selected. You will then be returned to the Network Properties window. Click Close and the system will reboot.

2. Using VPN

Double-click on My Computer, then on Dial-Up Networking. If you are prompted with a window that asks you if you would rather edit the settings directly, choose yes. From the Phonebook window, choose New, enter the host name or IP address (see below: PA VPN Status) as the Phone Number and your own choice as the Entry Name. All other settings can be left at their defaults.

4. Windows 2000


1. Setting Up a Connection

To set a a VPN connection in Windows 2000, first go to the Network and Dial Up Connections menu off of the Start Menu, under Settings. Double click Make New Connection, and then click Next. Click Connect to a private network through the Internet, and click Next. If you dial in to the Internet, you will need to choose a dial-up connection to use to run the VPN connection over. If you are on a LAN, you will not see this step.

Then you will be prompted for the host name or IP address (see below: PA VPN Status) of the computer or network to which you are connecting. Click Next. Then you'll need to choose whether to have the connection available for all users or just yourself. You'll probably want to pick Only for myself and click Next. If you are planning on using Internet Connection Sharing over the connection you can choose it now. Otherwise click Next, type a name for the connection, and click Finish.

2. Using VPN

To make the VPN connection, first make sure your Internet connection is established, either by dialing in or by your computer being on a LAN. Then go to the Network and Dial-up Connections menu off the Start Menu, under Settings. Double click your VPN connection, and a login window will pop-up. Enter your username and password and click Connect. The VPN connection should then be established.

5. Windows XP


1. To Set up a VPN Connection with Windows XP, go to Start > Control Panel > Network Connections.
2. Click on Create a new connection in the top left, or go to File > New Connection...
3. Select the option called Connect to the network at my workplace then hit next. Select Virtual Private Network connection. You can call the connection name PHY-AST or whatever you wish, then hit next.
4. Under VPN Server Selection type in vpn.pa.msu.edu and hit next. You can select the new connection to be for your use only and add a shortcut on the desktop if you like.
5. To connect to the VPN, simply either use the shortcut on your desktop or go back into the Network Connections folder and click on it from there.


6. PA VPN Status
   

   VPN ability has been enabled for the PHY-AST domain, however it remains in testing, and this is no guaranteed to work. To connect, enter vpn.pa.msu.edu as your host name, and use your domain username and password. Problems with VPN should be refered to the PA Helpdesk via email at helpdesk@pa.msu.edu.

7. Other Useful Information

   To configure VPN when using Zonealarm or Zonealarm Pro as a personal firewall, read this FAQ.