ARCHIVED: In Windows 2000, how do I make a VPN connection to the IU network using PPTP?
Note: When on campus, use the IU Secure wireless network; no VPN is needed. (IU Secure will be available at IUN by spring semester 2009.)
Note: When connecting from off campus, SSL VPN is the replacement for IU's IPsec- and PPTP-based VPN services, and UITS recommends using it now if your campus supports it. PPTP is retired at IU Bloomington and IUPUI, and IPsec VPN service at those campuses will be retired by fall 2010.
On this page:
- Introduction
- Creating a VPN connection
- Configuring your VPN connection
- Establishing a VPN connection
Introduction
This document explains how to manually set up a VPN connection in Windows 2000 at Indiana University Bloomington and IUPUI. UITS recommends that you set up a VPN connection to IU for Windows 2000 by using the VPN Installers, available from the IUware CD or from IUware Online at:
http://iuware.iu.edu/list.aspx?id=134This software automatically does what the instructions in this document describe how to do manually.
Before creating a VPN connection, make sure your copy of Windows 2000 is running the latest service pack. To scan your computer and download the service packs and updates you need, visit Microsoft Windows Update at:
http://windowsupdate.microsoft.com/If you are unsure which service pack is currently installed on your computer, see In Windows, how can I tell which service packs are installed? For more information on obtaining updates for Windows 2000, see For Windows, how can I get software updates and patches?
Note: IU's VPN is intended for individual computing accounts only. Group and departmental accounts cannot access the VPN. See Why can't I make a VPN connection through an IU group or departmental account?
Note: If you are a student, faculty member, or staff member at Indiana University Bloomington, IUPUI, or IU East, use the IU Secure network for wireless access. For help, see What is IU Secure? If you are visiting IU, instead see Network Access accounts (guest wireless access) at IUB, IUPUI, and IUE.
Creating a VPN connection
To create a VPN connection to the IU network in Windows 2000, either wirelessly or remotely:
- Right-click
My Network Placesand selectProperties.
- In the
Network and Dial-up Connectionswindow, double-click theMake New Connectionicon to open the Network Connection Wizard. ClickNext.
- Select
Connect to a private network through the Internet, and then clickNext.Note: If the
Connect to a Virtual Private Network through the Internetoption is not available, you may need to enable the Remote Access Connection Manager service. For more information, see In Windows XP Professional, why is the option to create a VPN connection unavailable? - If your computer already has a
Dial-Up Networkingicon, at this point you may see the following message:"Windows can automatically dial the initial connection to the Internet or other public network before establishing the virtual connection."
If you don't see the above message, proceed directly to the
Destination Addresswindow (see step 5). If you do see the message, do the following:- In the
Public Networkwindow, you must tell Windows what public network connection you will use to attach to your VPN:
- If you are connected to a persistent Internet
connection (e.g., Ethernet), choose
Do not dial the initial connection. - If you must dial in to connect to the Internet, choose
Automatically dial this initial connectionand select your Internet service provider (ISP) connection.
- If you are connected to a persistent Internet
connection (e.g., Ethernet), choose
- Click
Next.
- In the
- In the
Destination Addresswindow, type the hostname or address of your VPN server and clickNext.Use the table below to find your VPN server for both remote (e.g., cable modem, DSL, or outside Internet service provider) and wireless VPN connections:
Campus VPN server
IU Bloomington pptp.indiana.eduIU East vpn.iue.eduIU Kokomo vpn.iuk.eduIU Northwest 149.162.8.2IUPUI pptp.iupui.eduIU South Bend vpn.iusb.eduIU Southeast vpn.ius.edu - In the
Connection Availabilitywindow, select the option most appropriate for your situation, and then clickNext.Note: If you are using a wireless card and wish to log into a domain (including ADS) upon starting Windows 2000, you must select
For all users. Selecting this option will make the VPN connection available when you chooseLog on using dial-up connectionat the login screen. - On the next screen, type a name for your new connection (e.g.,
IU-VPN). If you want a shortcut icon on your desktop for the new connection, selectAdd a shortcut to my desktop.
- Click
Finishto complete the connection. You now should see your new connection under "Network and Dial-Up Connections".Note: You may be presented with a login screen to get connected to the VPN server instead. You still need to complete the following steps, so do not log in yet. Continue to the following section.
Configuring your VPN connection
To configure your connection for the IU VPN servers:
- If you have proceeded here from the previous steps and see the VPN
login box, click the
Propertiesbutton.If you don't see the login box, locate and select the VPN connection icon, and then right-click and select
Propertiesfrom the menu that appears. - Click the
Optionstab, and selectPrompt for name and password, certificate, etc.andInclude Windows logon domain.
- Click the
Networkingtab. Set "Type of VPN server I am calling:" toAutomatic.
- In the "Components checked are used by this connection" field,
only the following should be checked:
Internet Protocol (TCP/IP)File and Printer Sharing for Microsoft NetworksClient for Microsoft Networks
- Select
TCP/IP, and then clickProperties.
- Select both
Obtain an IP address automaticallyandObtain DNS server address automatically. ClickOK.
- Click the
Securitytab.
- Select
Advanced (custom settings), and then clickSettings.
- Under "Logon Security", select
Allow these protocolsand make sure the only checkbox selected isMicrosoft CHAP Version 2 (MS-CHAP v2). Then clickOK.
Establishing a VPN connection
To establish a connection to the VPN server:- Double-click the new connection icon. When prompted, enter your
ADS username and password. In the "Logon domain:" field, enter
ADS. ClickConnect.Note: It may take up to a minute to establish a connection with the VPN server. Please be patient. If you have problems connecting, note any error messages and contact your campus Support Center.
- When the connection is established, you should see a new icon in
the system tray. This icon is identical to the one for dial-up
connections.
- To disconnect and terminate the connection, double-click the icon
in the system tray and choose
Disconnect.
Last modified on June 01, 2009.







