Configure a VPN Connection Using Windows XP

(1)

Configure a VPN Connection Using Windows XP http://www.windowsecurity.com/articles/Configure-VPN-Connection-W...

Articles Authors Blogs

ISA Server Articles Links Message Boards Newsletter RSS Security Tests Services Software White Papers Site Search

Configure a VPN Connection Using Windows XP

Published: Mar 18, 2005

Updated: Mar 18, 2005

Section: Articles :: Firewalls & VPNs

Author: Robert J. Shimonski Printable Version

Adjust font size:

Rating: 3.7/5 - 402 Votes 1 nmlkj 2 nmlkj 3 nmlkj 4 nmlkj 5 nmlkj

In this article we will learn how to configure a connection to a virtual private network (VPN) using Windows XP. This article will show you how to create a new VPN connection using Microsoft Windows XP. By creating an encryption tunnel through the Internet, data can be passed safely.

Search Site

AMD Enterprise Solutions

- Industry Standard Best-Of-Breed

Products w/AMD Opteron™. Get Info.

www.amd.com/opteron

(2)

"For a complete guide to security, check out 'Security + Study Guide and DVD Training System' from Amazon.com"

VPN Overview

A VPN is a private network created over a public one. It’s done with encryption, this way, your data is encapsulated and secure in transit – this creates the ‘virtual’ tunnel. A VPN is a method of connecting to a private network by a public network like the Internet. An internet connection in a company is common. An Internet connection in a Home is common too. With both of these, you could create an encrypted tunnel between them and pass traffic, safely - securely.

If you want to create a VPN connection you will have to use encryption to make sure that others cannot intercept the data in transit while traversing the Internet. Windows XP provides a certain level of security by using

Point-to-Point Tunneling Protocol (PPTP) or Layer Two Tunneling Protocol (L2TP). They are both considered tunneling protocols – simply because they create that virtual tunnel just discussed, by applying encryption.

Configure a VPN with XP

If you want to configure a VPN connection from a Windows XP client computer you only need what comes with the Operating System itself, it's all built right in. To set up a connection to a VPN, do the following:

On the computer that is running Windows XP, confirm that the connection to the Internet is correctly configured.

1.

You can try to browse the internet

Ping a known host on the Internet, like yahoo.com, something that isn’t blocking ICMP Click Start, and then click Control Panel.

(3)

In Control Panel, double click Network Connections 3.

Click Create a new connection in the Network Tasks task pad 4.

(4)

In the Network Connection Wizard, click Next. 5.

Click Connect to the network at my workplace, and then click Next. 6.

Click Virtual Private Network connection, and then click Next. 7.

If you are prompted, you need to select whether you will use a dialup connection or if you have a dedicated connection to the Internet either via Cable, DSL, T1, Satellite, etc. Click Next.

(5)

Type a host name, IP or any other description you would like to appear in the Network Connections area. You can change this later if you want. Click Next.

9.

Type the host name or the Internet Protocol (IP) address of the computer that you want to connect to, and then click Next.

10.

You may be asked if you want to use a Smart Card or not. 11.

(6)

You are just about done, the rest of the screens just verify your connection, click Next. 12.

Click to select the Add a shortcut to this connection to my desktop check box if you want one, if not, then leave it unchecked and click finish.

13.

You are now done making your connection, but by default, it may try to connect. You can either try the connection now if you know its valid, if not, then just close it down for now.

(7)

In the Network Connections window, right-click the new connection and select properties. Let’s take a look at how you can customize this connection before it’s used.

15.

The first tab you will see if the General

Tab. This only covers the name of the connection, which you can also rename from the Network

Connection dialog box by right clicking the connection and selecting to rename it. You can also configure a First connect, which means that Windows can connect the public network (like the Internet) before starting to attempt the ‘VPN’ connection. This is a perfect example as to when you would have configured the dialup connection; this would have been the first thing that you would have to do. It's simple, you have to be connected to the Internet first before you can encrypt and send data over it. This setting makes sure that this is a reality for you.

(8)

The next tab is the Options

Tab. It is The Options tab has a lot you can configure in it. For one, you have the option to connect to a Windows Domain, if you select this check box (unchecked by default), then your VPN client will request Windows logon domain information while starting to work up the VPN connection. Also, you have options here for redialing. Redial attempts are configured here if you are using a dial up connection to get to the Internet. It is very handy to redial if the line is dropped as dropped lines are very common.

(9)

The next tab is the Security

Tab. This is where you would configure basic security for the VPN client. This is where you would set any advanced IPSec configurations other security protocols as well as requiring encryption and

credentials. 18.

(10)

The next tab is the Networking

Tab. This is where you can select what networking items are used by this VPN connection. 19.

(11)

The Last tab is the Advanced

Tab. This is where you can configure options for configuring a firewall, and/or sharing. 20.

Connecting to Corporate

Now that you have your XP VPN client all set up and ready, the next step is to attempt a connection to the Remote Access or VPN server set up at the corporate office. To use the connection follow these simple steps. To open the client again, go back to the Network Connections dialog box.

One you are in the Network Connection dialog box, double-click, or right click and select ‘Connect’ from the menu – this will initiate the connection to the corporate office.

(12)

Type your user name and password, and then click Connect. Properties bring you back to what we just discussed in this article, all the global settings for the VPN client you are using.

2.

To disconnect from a VPN connection, right-click the icon for the connection, and then click “Disconnect” 3.

Summary

In this article we covered the basics of building a VPN connection using Windows XP. This is very handy when you have a VPN device but don’t have the ‘client’ that may come with it. If the VPN Server doesn’t use highly proprietary protocols, then you can use the XP client to connect with. In a future article I will get into the nuts and bolts of both IPSec and more detail on how to configure the advanced options in the Security tab of this client.

About Robert J. Shimonski

Robert J. Shimonski (MCSE, etc) is an entrepreneur, technology consultant and published author. Robert's specialties include network infrastructure design, management and the troubleshooting of Microsoft and Cisco products. Robert has in depth experience with globally deployed Microsoft and Cisco systems. Robert works with new companies constantly to help them forge their designs, as well as to optimize their networks and keep them highly available, secure and disaster free. Robert is author of many security related articles and published books to include the best selling: "Sniffer Network Optimization and Troubleshooting Handbook" from Syngress Media Inc (ISBN: 1931836574). Robert is also the author of the best selling: Security+ Study Guide and DVD Training System (ISBN: 1931836728) and Building DMZs for Enterprise Networks (ISBN: 1931836884) also from Syngress. Robert can be found online at www.rsnetworks.net

Click here for Robert J. Shimonski's section.

(13)

Receive all the latest articles by email!

Get all articles delivered directly to your mailbox as and when they are released on WindowSecurity.com! Choose between receiving instant updates with the Real-Time Article Update, or a monthly summary with the Monthly Article Update.

g

f

e

d c

b Real-Time Article Update (click for sample) g

f

e

d c

b Monthly Article Update (click for sample)

Latest articles by Robert J. Shimonski

Physical Security Primer (Part 2)

Wipe your Deleted Data Away: Using cipher.exe How To: Mastering PortQry.exe (Part 2)

How To: Mastering PortQry.exe (Part 1) How to Plan for a Possible Network Attack

Featured Links*

Is your website vulnerable to Cross Site scripting attacks?

Find out with Acunetix WVS - Free Edition - No time outs! Download the Free Edition today!

Powerful security event log monitoring, analysis and management across your LAN/WAN

Are you managing your event logs efficiently, without wasting valuable time? Be served with the events that matter and automatically monitor and manage Windows event logs, W3C logs, Syslog events and SNMP Traps. Download a free trial today!

Download ScriptLogic's Active Administrator and get a free eBook!

Download ScriptLogic's Active Administrator

and get a free copy of the eBook "The Administrator's Shortcut Guide to Active Directory Security" by Derek Melber and Dave Kearns.

(14)

Receive Real-Time & Monthly WindowSecurity.com article updates in your mailbox. Enter your email below! Click for Real-Time sample & Monthly sample

Become a WindowSecurity.com member!

Discuss your security issues with thousands of other network security experts. Click here to join!

Community Area

Log in | Register

Solution Center

Learn about Cross Site Scripting and other web attacks

(15)

Articles & Tutorials

Authentication, Access Control & Encryption Content Security (Email & FTP)

Firewalls & VPNs Intrusion Detection Misc Network Security Product Reviews

Viruses, trojans and other malware Web Application Security

Web Server Security Windows 2003 Security Windows Networking Windows OS Security Wireless Security Authors Derek Melber Don Parker Jakob H. Heidelberg Martin Kiaer Ricky M. Magalhaes Thomas Shinder Brien Posey Deb Shinder Justin Troutman Mitch Tulloch Robert J. Shimonski Blogs Message Boards Newsletter Signup RSS Feed Security Tests Services

Email Security Services Managed security services Software

Anti Virus

Authentication / Smart cards Email Anti-Virus

Email Content Security Email Encryption Encryption Endpoint Security Event Log Monitoring File integrity checkers

Firewall security log analyzers Firewalls

Group Policy Management Intrusion Detection

Misc. Network Security Tools Network Auditing

(16)

Web Application Security Web Content Security White Papers

Featured Products

Scan for XSS vulnerabilities with Acunetix Free edition

Vulnerability scanning Dld 30-day trial!

Readers' Choice

Which is your preferred Email Anti Virus solution?

n m l k jBitDefender Security n m l k jGFI MailSecurity n m l k jKaspersky Security n m l k jPanda Security n m l k

jSophos Email Security n m l k jSybari Antigen n m l k jSymantec AntiVirus n m l k

jTrend Micro InterScan n m l k jVisNetic MailScan n m l k jOther Vote!

TechGenix Sites

ISAserver.org

The No.1 ISA Server 2006 / 2004 / 2000 resource site. MSExchange.org

The leading Microsoft Exchange Server 2007 / 2003 / 2000 resource site. WindowsNetworking.com

Windows Server 2008 / 2003 & Windows Vista networking resource site. MSTerminalServices.org

(17)

Articles Authors Blogs Books

ISA Server Articles Links Message Boards Newsletter RSS Security Tests Services Software White Papers

About Us : Email us : Product Submission Form : Advertising Information

WindowsSecurity.com is in no way affiliated with Microsoft Corp. *Links are sponsored by advertisers.

Configure a VPN Connection Using Windows XP

Configure a VPN Connection Using Windows XP

AMD Enterprise Solutions

- Industry Standard Best-Of-Breed

Products w/AMD Opteron™. Get Info.

www.amd.com/opteron

VPN Overview

Configure a VPN with XP

Connecting to Corporate

Summary

About Robert J. Shimonski

Receive all the latest articles by email!

Latest articles by Robert J. Shimonski

Related links

Featured Links*

Become a WindowSecurity.com member!

Community Area

Solution Center

Featured Products

Readers' Choice

TechGenix Sites