Windows2003 VPN Server


The following page details the steps necessary to create a Windows2003 VPN Server
Initial VPN Server Configuration
While setting up a VPN server can have a lot of different possible configurations, the following will hopefully be a good, basic start for setting up a Windows2003 VPN server.
1.	Go to Control Panel / Administrative Tools / Routing and Remote Access

2.	Right click on the computer name
3.	Right click on the computer name. In the example it is W3K
4.	Select Configure and Enable Routing and Remote Access
5.	Click on the Next button
6.	If you have only one network card, select Custom configuration
7.	Click on the Next button

9.	Click on VPN access, Next, and Finish
10.	When prompted to start the service, click on Yes
Changing the Number of Available Ports
1.	The default setting is to create 128 VPN and 128 L2TP ports. To change the number, Right click Ports and select Properties.

2.	Double click on the protocol you want to change and set the Maximum ports to whatever you need. Then click OK, Apply, Ok

Assigning the IP Address Range for the Clients
1.	Right click on Server name
2.	Select Properties
3.	Click on the IP tab
4.	Check Static address pool
5.	Click on the Add button
6.	Enter in the starting IP address that will be assigned to the clients
7.	This should be with the same IP scheme as your local network
8.	In the Number of address:, enter in the same number of VPN connections created earlier. The ending IP address will be filled in automatically
9.	Click Ok, Apply, OK

User Access
1.	You next need to make sure each user account has VPN access
2.	Go to their account setting
3.	Select Properties
4.	Click on the Dial-in tab
5.	Check Allow access

If the VPN server is behind a router, Port Mapping will need to be done on the router. Standard port usage is 1723 for PPTP. You might also need to configure your router for PPTP Passthrough. Port usage for IPSec is 500, 50-51. These ports will have to be forwarded to the VPN server’s local IP address