ARCHIVED: In Windows 2000, how do I make a VPN connection to the IU network using PPTP?

• Introduction
• Creating a VPN connection
• Configuring your VPN connection
• Establishing a VPN connection

Introduction

This document explains how to manually set up a VPN connection in Windows 2000 at Indiana University Bloomington and IUPUI. UITS recommends that you set up a VPN connection to IU for Windows 2000 by using the VPN Installers, available from the IUware CD or from IUware Online at:

  http://iuware.iu.edu/list.aspx?id=134

This software automatically does what the instructions in this document describe how to do manually.

Before creating a VPN connection, make sure your copy of Windows 2000 is running the latest service pack. To scan your computer and download the service packs and updates you need, visit Microsoft Windows Update at:

  http://windowsupdate.microsoft.com/

If you are unsure which service pack is currently installed on your computer, see ARCHIVED: In Windows, how can I tell which service packs are installed? For more information on obtaining updates for Windows 2000, see ARCHIVED: For Windows, how can I get software updates and patches?

Creating a VPN connection

To create a VPN connection to the IU network in Windows 2000, either wirelessly or remotely:

1. Right-click My Network Places and select Properties.
2. In the Network and Dial-up Connections window, double-click the Make New Connection icon to open the Network Connection Wizard. Click Next.
3. Select Connect to a private network through the Internet, and then click Next.

   Note: If the Connect to a Virtual Private Network through the Internet option is not available, you may need to enable the Remote Access Connection Manager service. For more information, see ARCHIVED: In Windows XP Professional, why is the option to create a VPN connection unavailable?

4. If your computer already has a Dial-Up Networking icon, at this point you may see the following message:

   "Windows can automatically dial the initial connection to the Internet or other public network before establishing the virtual connection."

   If you don't see the above message, proceed directly to the Destination Address window (see step 5). If you do see the message, do the following:

   1. In the Public Network window, you must tell Windows what public network connection you will use to attach to your VPN:
      • If you are connected to a persistent Internet connection (e.g., Ethernet), choose Do not dial the initial connection.
      • If you must dial in to connect to the Internet, choose Automatically dial this initial connection and select your Internet service provider (ISP) connection.
      
      
   2. Click Next.
5. In the Destination Address window, type the hostname or address of your VPN server and click Next.

   This content is archived and, to avoid any possible confusion, is no longer available for viewing.

6. In the Connection Availability window, select the option most appropriate for your situation, and then click Next.

   Note: If you are using a wireless card and wish to log into a domain (including ADS) upon starting Windows 2000, you must select For all users. Selecting this option will make the VPN connection available when you choose Log on using dial-up connection at the login screen.

7. On the next screen, type a name for your new connection (e.g., IU-VPN). If you want a shortcut icon on your desktop for the new connection, select Add a shortcut to my desktop.
8. Click Finish to complete the connection. You now should see your new connection under "Network and Dial-Up Connections".

   Note: You may be presented with a login screen to get connected to the VPN server instead. You still need to complete the following steps, so do not log in yet. Continue to the following section.

Configuring your VPN connection

To configure your connection for the IU VPN servers:

1. If you have proceeded here from the previous steps and see the VPN login box, click the Properties button.

   If you don't see the login box, locate and select the VPN connection icon, and then right-click and select Properties from the menu that appears.

2. Click the Options tab, and select Prompt for name and password, certificate, etc. and Include Windows logon domain.
3. Click the Networking tab. Set "Type of VPN server I am calling:" to Automatic.
4. In the "Components checked are used by this connection" field, only the following should be checked:
   • Internet Protocol (TCP/IP)
   • File and Printer Sharing for Microsoft Networks
   • Client for Microsoft Networks
   
   
5. Select TCP/IP, and then click Properties.
6. Select both Obtain an IP address automatically and Obtain DNS server address automatically. Click OK.
7. Click the Security tab.
8. Select Advanced (custom settings), and then click Settings.
9. Under "Logon Security", select Allow these protocols and make sure the only checkbox selected is Microsoft CHAP Version 2 (MS-CHAP v2). Then click OK.

Establishing a VPN connection

To establish a connection to the VPN server:

1. Double-click the new connection icon. When prompted, enter your ADS username and password. In the "Logon domain:" field, enter ADS. Click Connect.

   Note: It may take up to a minute to establish a connection with the VPN server. Please be patient. If you have problems connecting, note any error messages and contact your campus Support Center.

2. When the connection is established, you should see a new icon in the system tray. This icon is identical to the one for dial-up connections.
3. To disconnect and terminate the connection, double-click the icon in the system tray and choose Disconnect.