How to setup vpn on 2003 as router

How to setup VPN and NAT on Windows Server 2003 as a router

Pre-requirement:

1. Two network interface cards.

2. One static public IP on the outside NIC.

3. One static private IP on the private NIC. Note: remember to enable the inside NIC. Otherwise, the VPN may not work. Case Study - Can't establish VPN because the private NIC is disabled and Can't browse over VPN because the inside NIC is disabled

Configuration:

1. Open Routing and Remote Access from Administrative Tools.

2. Right-click the server and then click Configure and Enable Routing and Remote Access (see picture). Note: you should disable Windows Firewall and Internet Connection sharing if you installed SP1. Related Topics Troubleshooting Windows Server2003 SP1 Issues

3. Click Next on Welcome screen. Select Virtual Private Network [VPN] access and NAT in the Configuration of Routing and Remote Access server setup Wizard (see picture). Note: because this server is also a router it is better to enable NAT. Related Topics: NAT/Firewall.

4. In VPN Connection screen, select outside NIC which is connecting to the Internet (see picture).

5. If you have more than one NIC for the inside networks, you will have a Network Selection option to select which network or NIC for the VPN client access (see picture).

6. In the IP Address Assignment, you have two options, Automatically and From a specified range address. We keep the default, Automatically (see picture). Case Study -

7. In Managing Multiple Remote Access, select No if you don't have RADIUS.

8. Click when the screen "To support replaying of DHCP message from remote access clients, you must must configure the properties of the DHCP Relay Agent with the IP address of your DHCP server".

Now, you should be able to test your VPN.

Post your questions, comments, feedbacks and suggestions

Contact a consultant