howithink - how about a tutorial when you assign STATIC & Public Dedicated IP address (in case your server has multiple public IP addresses of course) to a vpn client? Not internal IP and do NAT. That would be really useful and I can not find any tutorial anywhere :) what you think can you do it ?
@Essentia2 Thanks for your concern. I find it that many people don’t know how to setup vpn in general. This is a quick and easy way to setup vpn. I'm sure you can do a more secure and a more sophisticated setup.
@howithink Kind of hard for me to get it right, too >_< It's difficult to make it work right, which is why I urge you all the more to make a video for SSTP/L2TP with troubleshooting. I think THAT would indeed be appreciated. That way you get a safe VPN, and everyone is happy.
@Essentia2 True, SSTP is not supported by XP and majority of the folks at my company use xp. L2TP is a mess setting up with firewall. Although do'able if you dont want certificate server, you can use preshare key and maybe get it to work, i couldnt. SSTP is great and works great on windows 7, but you do need a certificate server or a self signed certificate which means every user must export the certificate (this is where user errors come in). I'll make a video on sstp vpn soon.
This is great but there is one major mistake.....DO NOT enable the catch all rule in NPS.....you should instead create a rule with a lower number (processing order number) and then specify the connection types you want to allow......OTHERWISE THIS LEAVES YOUR RRAS server WIDE OPEN
howithink - how about a tutorial when you assign STATIC & Public Dedicated IP address (in case your server has multiple public IP addresses of course) to a vpn client? Not internal IP and do NAT. That would be really useful and I can not find any tutorial anywhere :) what you think can you do it ?
skyiporg 6 months ago
Why do you only use PPTP? It's the most insecure of all types of connections!
Since this is a tutorial, I find it being a merit to help people set up a more complicated and more secure VPN.
Essentia2 6 months ago
@Essentia2 Thanks for your concern. I find it that many people don’t know how to setup vpn in general. This is a quick and easy way to setup vpn. I'm sure you can do a more secure and a more sophisticated setup.
howithink 6 months ago
@howithink Kind of hard for me to get it right, too >_< It's difficult to make it work right, which is why I urge you all the more to make a video for SSTP/L2TP with troubleshooting. I think THAT would indeed be appreciated. That way you get a safe VPN, and everyone is happy.
Essentia2 6 months ago
@Essentia2 True, SSTP is not supported by XP and majority of the folks at my company use xp. L2TP is a mess setting up with firewall. Although do'able if you dont want certificate server, you can use preshare key and maybe get it to work, i couldnt. SSTP is great and works great on windows 7, but you do need a certificate server or a self signed certificate which means every user must export the certificate (this is where user errors come in). I'll make a video on sstp vpn soon.
howithink 6 months ago
This is great but there is one major mistake.....DO NOT enable the catch all rule in NPS.....you should instead create a rule with a lower number (processing order number) and then specify the connection types you want to allow......OTHERWISE THIS LEAVES YOUR RRAS server WIDE OPEN
yesterdaysguy 6 months ago
@yesterdaysguy Thanks for the clarification .
howithink 6 months ago
Well, only you could help me with this.... I finally got it to work with your instructions.
I am using Windows Server Standard 2008 R2 and the only extra thing I did was forward port 1723 (PPTP) to my server in the NETGEAR router.
JRichens 7 months ago
Thank you for a clear step by step. This was most helpful. Great work.
bartedson 7 months ago
How do i configure Windows 7 to work with these settings. I cant get it right..
carlosturn 8 months ago
You have no idea how many people I've tried working with to get this right. THANK YOU!
jkramm 10 months ago