How to Configure VPN,RAS and IPSec Policy in Windows Server

VPN is a trusted and secure network, which use tunneling and protocol(PPTP,L2TPIPSec) to make data transmission through the public network.

RAS: remote access service used to access server remotely from client terminal using dial-up connection.

IAS:Internet authentication service is used to remotely and centrally manage all RAS server and keep remote access policy centrally in a single location.

RADIUS: it is an authentication protocol which is used with RAS serer always become client of IAS serer.

 How to create VPN in Windows 2003?

1. Open routing and remote access from the administrative tools.
2. Right click on the server name and then click on “enable routing and remote access”.
   click Next
3. Select “custom configuration”.
4. Click Next and check VPN access.
5. Click Finish

Setting permission for dial up connection

1. Open active directory users and computers
2. Select the user whom you want to grant dial up permission.
3. Click on properties of that user
4. Select dial in tab
5. In the remote access permission section check allow access.
6. If you want to allow only a specific called ID that the user need to use to connect to your
7. Server then select the option of verify caller ID and type the phone number of that user.
8. You can assign a static IP address to assign a IP for that dial-in client

 

From a client machine to connect to a RAS server using dial-in

1. Open network connection of your PC.
2. Click on create a new connection
3. Click Next.
4. Select connect to  the network at my workplace
5. Click Next and then select virtual private network connection.
6. Put the server IP(RAS server IP)
7. Click Next and Finish.

How to configure RAS server

1. Go to administrative tools and click mange your server
2. Click “Add or remove a role” and click Next.
3. Highlight remote access/VPN server, click Next.
4. Select remote access and select VPN or remote access or both. Otherwise you can select the custom configuration and then select the options as per your requirements.

Creating remote access group in active directory

1. Create  a global group in active directory.
2. Add a user to this group.
3. Right click on the user and open properties.
4. Select dial in and then check “control access through remote access policy”.
5. Now, open routing  and remote access
6. Right click on it and select new remote access policy
7. Next, next.
8. Set up a custom policy
9. Name it  and click Next.
10. Add
11. Select Windows group
12. Add that global group
13. Grant remote access permission

How to enable Software routing in a VPN server?

1. Assign IP to both of the LAN card on your VPN server
2. Ping both the IP to test that the interfaces are up and working
3. Go to admin tools and select routing and remote access
4. Right click on the machine or computer name
5. Click on Configure and enable routing and remote access
6. Click Next and select custom configuration
7. Click Next and select LAN routing
8. Click Next and finish

Setting IP Security Policy on Windows Server

1. Type mmc on the run option.
2. When console opens click on the file menu and select add/remove snap-in and click Add.
3. Select IP security policy management and click Add
4. Select local computer and click Finish.
5. Select IP security and policy on local computer and right click on it
6. Click on create IP security policy.
7. Click Next and name it.
8. IP security wizard will open
9. Uncheck the option “ remove active the default”
10. Click finish and then click on Add
11. Click Next and select this rule does not specify a tunnel
12. Click Next and select local area network
13. Select all ICMP and then click Next