Question: Create a VPN Connection

For this project, you will set up a very simple VPN connection between two computers on a LAN. More complex, and therefore more secure, VPN software, such as OpenVPN, is a better solution for long-term use. However, the process for setting up this software is beyond the scope of this book. Also, if you were setting up a VPN connection over the Internet, you would have to configure your router for port forwarding on the VPN port, which for PPTP VPN as used in this project is 1723

First you will set up the host, or server, for the VPN connection. Then you'll set up the client computer for the connection.

1. Windows 7 and 8 have PPTP VPN services embedded in the OS. Using a Windows 7 or Windows 8.1 computer, open the Network Connections window. (For Windows 8.1, right-click the Start button and click Network Connections. For Windows 7, open the Network and Sharing Center and click Change adapter settings.)

2. In the Network Connections window, press ALT on your keyboard. The menu bar appears. Click File and click New Incoming Connection. If necessary, enter an admin password in the UAC box and click Yes.

3. Check the user account that you want to allow VPN access to this computer. For best security, it should not be an administrator account, and it should have a very strong password. Click Next.

4. Check the Through the Internet option and click Next.

5. Make sure that Internet Protocol Version 4 (TCP/IPv4) is checked and click Allow access.

6. Write down the computer name, and then click Close.

7. Open a command prompt and use ipconfig to determine the computer's IP address. Write this information down as well.

8. Next, you need to open Windows Firewall to allow incoming traffic on TCP port 1723, which is the port PPTP uses. Open the Network and Sharing Center and click Windows Firewall.

9. In Windows Firewall, click Advanced settings. Click Inbound Rules.

10. In the right pane, click New Rule.

11. Click Port, and click Next. If necessary, select TCP.

12. In the Specific local ports box, type 1723. Click Next three times.

13. In the Name box, enter a name for the firewall rule and click Finish. Close all windows. Next you will enable the client computer to initiate the VPN connection.

14. On a different Windows 7 or 8.1 computer, right-click the network icon in the icon tray. Click Open Network and Sharing Center. Then click Set up a new connection or network.

15. Click Connect to a workplace, then click Next.

16. Click Use my Internet connection (VPN), type the IP address of the VPN host computer in the first field and the name of the computer in the second field. Click Create.

17. In the next dialog box, type the username that you authorized to use the VPN connection in the first field and the password in the second field. Click Connect or, in Windows 8.1, click OK. The connection is made.