Shellfire L2TP-IPSec Setup
Windows 7
This guide explains how to configure your Windows 7 PC to work with a Shellfire L2TP-IPSec VPN.
Index
1. Required data and files ... 2
2. Creating a connection ... 3
1.1. Importing certificates ... 3
1.2. Creating a new connection ... 3
3. Connecting and disconnecting ... 10
1. Required data and files
Setting up a L2TP-IPSec connection to your Shellfire VPN on Windows 7 works as follows.
You need the following data from your VPN details that can be found in your Shellfire QuickAccess customer center:
- server address - username - password
- the downloaded configuration package (click "download")
The server address is the address of the Shellfire Server used for connection. Username and password are required for authentication with the L2TP-IPSec server. The configuration package contains certificates for authentication required for highest connection security.
Navigation note: How to find your VPN details - www.shellfire.net
- Log in to using your customer id or your e-mail address and your password - Open the QuickAccess customer center bar
- Click on your VPN id (sfxxxxx)
- Your VPN details show up with the required data
Warning: Username and password for your L2TP-IPSec connection are not the same as the ones for your Shellfire website account!
Warning: In case your VPN is not currently set to IPSec, you have to change the VPN type to L2TP-IPSec from your customer center, first.
2. Creating a connection
Connecting to a L2TP-IPSec VPN with Windows 7 does not require any additional software to be installed. You only need a working internet connection.
Follow these steps:
1.1. Importing certificates
First, you have to import the certificates from the download package into your system. The certificates required for Windows 7 are packaged in the .p12 file that you can find inside the download package. Unzip the package to any folder on your hard drive and execute the file "ImportCertificates.bat" as an
administrator (right click -> execute as administrator), to import the certificates. Warning:
A simple double click on the unzipped .p12 file, opening the Windows import wizard does not work for this purpose, as the wizard can only import the certificates to the "current user" storage. A certificate for a working L2TP-IPSec connection MUST be imported into the "local machine" storage which can only be achieved by using the supplied .bat file or using a manual importing method.
Manual import (only required in case you do not want to use the import tool):
Alternatively, you can use Microsoft's management console to import .p12 certificates (Start -> Run -> mmc.exe). You have to make sure that you are importing the certificates to the "local machine" storage. To achieve this, add a new snap-in (File -> add / remove snap-in) -> certificates -> add -> certificates
(Computer account). In the tree on the left, you can now right-click the certificate folder -> all tasks -> "import...", select the previously unzipped .p12 file and follow the instructions.
1.2. Creating a new connection
Proceed as follows to add the L2TP-IPSec connection to your Windows network connections. 1) Start -> Control panel
2) Click on "View network status and tasks".
4) Choose "Connect to a workplace" and click "Next".
5) If you are asked if you want to use your existent connection, choose "No, create a new connection".
7) In the field "Internet address": Enter the server address from step 1. The target name (the name of this connection) can be chosen freely, use Shellfire L2TP for example.
Activate the setting "Don't connect now; just set up so that I can connect later" and click "Next"
8) Enter username and password from step 1. You can save the password if you like. Click "Create".
9) Your connection should now be ready. Choose "close". Warning: Do not attempt to connect, yet!
10)Click on the symbol "Network" on the right. Right-click on the newly created connection and choose "properties":
11)Go to the tab "Security" and set the VPN type to "Layer-2-Tunneling protocol with IPSec (L2TP/IPSec)"
12)Click "OK" twice.
3. Connecting and disconnecting
After rebooting your Computer or after being disconnected from the internet, the VPN connection usually disconnects and has to be reconnected.
To connect and disconnect, follow these steps:
1) Click on the symbol "Network", click on the created connection and choose "connect".
2) Click on "Connect" in the new connection window.
, 3) If you are asked about your network location, choose "public place". 4) You are now connected!
4. Check your connection status
If the VPN connection to the Shellfire server has been set up correctly, your IP address on the web is replaced by the IP address of the VPN server.
You can check this by following these steps:
1) Make sure the VPN connection is disconnected (step 4) 2) Visit http://www.whatsmyip.org/ and note your IP address.
3) Now, connect to the VPN server (step 4)
4) Reload the page http://www.whatsmyip.org/ and check your new IP address.
In this example, the first IP address is 123.123.123.123 and the second IP address is 111.111.111.111. As both IPs are different from each other, you can tell that your connection is working nicely. If you get the same IP addresses with and without VPN, check your settings or contact our support.
