{"id":13,"date":"2020-06-24T11:46:02","date_gmt":"2020-06-24T11:46:02","guid":{"rendered":"https:\/\/www.practicallynetworked.com\/?page_id=13"},"modified":"2022-11-05T11:34:26","modified_gmt":"2022-11-05T11:34:26","slug":"set-up-a-personal-windows-vpn","status":"publish","type":"post","link":"https:\/\/www.practicallynetworked.com\/set-up-a-personal-windows-vpn\/","title":{"rendered":"How To Set Up Your Own Windows VPN"},"content":{"rendered":"

Set Up Your Own VPN, Without the Expensive Software<\/b><\/span><\/p>\n

By Eric Geier<\/b><\/p>\n

If you want secure access to your network when away from the office, you can setup a Virtual Private Network (VPN\u00a0). You can connect via the Internet and securely access your shared files and resources. You don’t have to buy an expensive VPN server if don’t have a lot of users. Windows actually provides VPN server and client functionality.<\/p>\n

In this tutorial, we’ll set up the Windows 7 or Vista VPN server and connect with Windows XP, Vista, or 7. Now let’s get started!<\/p>\n

Avoiding IP conflicts<\/h2>\n

Since VPN connections link networks together, you must be careful with the subnet and IP addressing so there aren’t any conflicts. On the network hosting the VPN server, you should use an uncommon default IP for the router, such as 192.168.50.1. If you have multiple offices, assign each to a different uncommon IP\/subnet, such as 192.168.51.1, 192.168.52.1, and so on.<\/p>\n

\"\"<\/div>\n
Figure 1<\/div>\n

Create an incoming VPN connection in Windows<\/h2>\n

To configure the Windows VPN server, you do what is described by Microsoft as “creating an incoming connection.” This will be the server or host of the VPN. Among other things, you’ll specify the users you want to be able to connect. Follow these steps to create an incoming connection:<\/p>\n

    \n
  1. Right-click the network icon in the system tray and select\u00a0Open Network and Sharing Center<\/strong>.<\/li>\n
  2. Click on\u00a0Manage network connections<\/strong>\u00a0(Windows Vista) or\u00a0Change adapter settings\u00a0<\/strong>(Windows 7).<\/li>\n
  3. Press the\u00a0Alt<\/strong>\u00a0key to show the File Menu and click\u00a0File\u00a0<\/strong>>\u00a0New Incoming connection\u2026\u00a0<\/strong>.<\/li>\n
  4. Select who you’d like to give VPN access to and\/or create custom accounts by clicking on\u00a0Add someone<\/strong>. See\u00a0Figure 2<\/a>\u00a0for an example. When you’re done, click on\u00a0Next<\/strong>.<\/li>\n
  5. Select\u00a0Through the Internet<\/strong>, as\u00a0Figure 3<\/a>\u00a0shows, and click\u00a0Next<\/strong>.<\/li>\n
  6. Such as shown in\u00a0Figure 4<\/a>, select the protocols you want to enable for this connection. You’ll likely want to select\u00a0Internet Protocol Version 4 (TCP\/IPv4)<\/strong>, so remote users receive an IP address and can access the Internet and\/or network. Plus if you want the remote user(s) to access file and\/or printer shares, select\u00a0File and Printer Sharing for Microsoft Networks<\/strong>. When you’re done, click\u00a0Allow access<\/strong>.<\/li>\n
  7. On the next window, click\u00a0Close<\/strong>.<\/li>\n<\/ol>\n

    Now you need to access the properties of the newly created incoming network connection and define the IP address range for VPN clients:<\/p>\n

      \n
    1. On the\u00a0Network Connections<\/strong>\u00a0window, double-click\u00a0Incoming Connections<\/strong>.<\/li>\n
    2. Select the\u00a0Networking<\/strong>\u00a0tab and double-click\u00a0Internet Protocol Version 4 (TCP\/IPv4)<\/strong>.<\/li>\n
    3. Select\u00a0Specify IP addresses<\/strong>\u00a0and then enter a starting and ending address that’s within range of your local subnet but not conflicting with the DHCP range. For example, if your router’s IP is 192.168.50.1, you might enter 192.168.50.50 to 192.168.50.59 as shown in\u00a0Figure 5<\/a>, which would support 10 clients. If you want clients to be able to assign themselves an IP, select that option.<\/li>\n
    4. Click\u00a0OK<\/strong>\u00a0on both dialog boxes to save the changes.<\/li>\n<\/ol>\n

      Configure any third-party firewalls<\/h2>\n

      Windows will automatically allow the VPN connections through Windows Firewall when you configure the incoming connection on the host PC. However, if you have a third-party firewall installed on the host PC, you need to make sure the VPN traffic is allowed. You may have to manually enter the port numbers 47 and 1723.<\/p>\n

      Configure your IP address, dynamic DNS, and router<\/h2>\n

      To enable VPN connections to the host PC from the Internet, you must configure your router to forward them to the Windows PC that’s accepting the incoming connections. You specify the host PC by entering its local IP address. Therefore, before you setup the port forward, you should ensure the IP address won’t change.<\/p>\n

      Start by logging into to the Web-based control panel of the router. Then go to the Network or\u00a0DHCP<\/a>\u00a0settings and see if you can reserve the IP address for the PC so it always gets the same one. This may be called DHCP reservation or Static DHCP. Some routers don’t have this feature. In this case, you’ll need to manually assign the PC a static IP in the TCP\/IP settings of the network connection in Windows.<\/p>\n

      Once you have figured out the IP address, find the virtual server or port forwarding settings in the router’s web-based control panel. Then create an entry forwarding port 1723 to the local IP address of the PC, such as Figure 6 shows. Don’t forget to save the changes!<\/p>\n

      \"win7-vpn-fig6-2693104\"
      \nFigure 6.<\/div>\n

      If your Internet connection uses a dynamic IP address, rather than a static one, you should signup and configure a dynamic DNS service. This is because when you configure the remote clients, you have to input the Internet IP address of where the host PC is located. This will be a problem if the IP changes. However, you can sign up for a free service, such as from\u00a0No-IP, and input your account details into the router so it will update the hostname with your IP. Then you’ll have a hostname (such as yourname.no-ip.org) to input into remote clients, which will always point to the current Internet IP address of your host PC.<\/p>\n

      Now everything on the server side should be configured and ready to go. Next you need to setup the clients.<\/p>\n

      Create outgoing VPN connections in Windows<\/strong><\/p>\n

      Now that you have the server setup, you need to configure the computers which you want to connect from, called the VPN clients. Here’s how to in Windows Vista and 7:<\/p>\n

        \n
      1. Right-click the network icon in the system tray and select\u00a0Open Network and Sharing Center<\/strong>.<\/li>\n
      2. Click\u00a0Set up a connection or network<\/strong>\u00a0(Windows Vista) or\u00a0Set up a new connection or network\u00a0<\/strong>(Windows 7, as shown below).<\/li>\n<\/ol>\n

        \"\"<\/p>\n

          \n
        1. On the wizard, select\u00a0Connect to a workplace<\/strong>, and click\u00a0Next<\/strong>.<\/li>\n
        2. Select\u00a0Use my internet connection (VPN)<\/strong>.<\/li>\n
        3. Type the Internet IP address or hostname into the\u00a0Internet address<\/strong>\u00a0and enter something for the\u00a0Destination name<\/strong>. See\u00a0Figure 8 below\u00a0for an example. You’ll probably want to keep the other options disabled.<\/li>\n<\/ol>\n

          \"\"<\/p>\n

            \n
          1. Click\u00a0Next<\/strong>\u00a0to continue.<\/li>\n
          2. Enter a\u00a0User name<\/strong>\u00a0and\u00a0password<\/strong>\u00a0that was selected when you created the incoming VPN connection, and click Next to try to connect. It will attempt to connect using the following protocols: SSTP, PPTP, and then L2TP.<\/li>\n
          3. Once connected, click\u00a0Close<\/strong>.<\/li>\n<\/ol>\n

            Windows may by default assign the connection as a Public Network, limiting sharing functionality. Therefore you probably want to change this. If you aren’t prompted to do so, open the\u00a0Network and Sharing Center<\/strong>\u00a0and click\u00a0Customize<\/strong>\u00a0(Windows Vista) or the\u00a0Public network<\/strong>\u00a0link under the connection name (Windows 7). Then on the popup window, select\u00a0Work Network<\/strong>.<\/p>\n

            Here’s how to create and outgoing VPN connection in Windows XP:<\/p>\n

              \n
            1. Open the\u00a0Network Connections<\/strong>\u00a0window and click\u00a0Create a new connection<\/strong>.<\/li>\n
            2. Select\u00a0Connect to the network at my workplace<\/strong>, and click\u00a0Next<\/strong>.<\/li>\n
            3. Select\u00a0Virtual Private Network connection<\/strong>, and click\u00a0Next<\/strong>.<\/li>\n
            4. Enter a name for the connection, and click\u00a0Next<\/strong>.<\/li>\n
            5. Select\u00a0Do not dial the initial connection<\/strong>, and click\u00a0Next<\/strong>.<\/li>\n
            6. Type the Internet IP address or hostname, and click\u00a0Next<\/strong>.<\/li>\n
            7. Click\u00a0Finish<\/strong>.<\/li>\n<\/ol>\n

              Limiting VPN traffic<\/h2>\n

              By default, all the Internet traffic on the VPN client will pass through the VPN rather than the local Internet they are connected to. This is great if they are using a public connection, like a port in a hotel or Wi-Fi hotspot, since it keeps their browsing private. However, if they are on a trusted network, like at their home or remote office, this just might be wasting bandwidth. To limit the traffic that passes through the VPN connection:<\/p>\n

                \n
              1. On the\u00a0Network Connections<\/strong>\u00a0window, right-click the\u00a0VPN connection<\/strong>\u00a0and select\u00a0Properties<\/strong>.<\/li>\n
              2. Select the\u00a0Network\u00a0<\/strong>tab and double-click\u00a0Internet Protocol (TCP\/IP).<\/strong><\/li>\n
              3. Click the\u00a0Advanced\u00a0<\/strong>button and uncheck\u00a0Use default gateway on remote network\u00a0<\/strong>(see\u00a0Figure 9).<\/li>\n<\/ol>\n

                \"\"<\/p>\n

                  \n
                1. Click\u00a0OK<\/strong>\u00a0on the dialog boxes to save changes.<\/li>\n<\/ol>\n

                  Now the VPN client will use the local Internet connection when browsing websites. It will only use the VPN connection when a server or IP address isn’t reachable via the Internet, such as when accessing shares on the VPN host network.<\/p>\n

                  Connecting to the VPN<\/h2>\n

                  In Windows XP, you can connect and disconnect by opening the\u00a0Network Connections<\/strong>\u00a0window and right-clicking the VPN connection. In Windows Vista, you can click the network icon in the system tray, click\u00a0Connect to<\/strong>, and then select the connection. In Windows 7, click the network icon in the system tray and select the VPN connection.<\/p>\n

                  After you connect, you should be able to access the shared resources on the VPN host network. Keep in mind; you may have to manually access shares (e.g. ip_address_of_computer or file:\/\/computer_name\/) rather than browsing in My Network Places or Network.<\/p>\n","protected":false},"excerpt":{"rendered":"

                  Set Up Your Own VPN, Without the Expensive Software By Eric Geier If you want secure access to your network when away from the office, you can setup a Virtual Private Network (VPN\u00a0). You can connect via the Internet and securely access your shared files and resources. You don’t have to buy an expensive VPN server if don’t have a lot of users. Windows actually provides VPN server and client functionality. In this tutorial, we’ll set up the Windows 7 or Vista VPN server and connect with Windows XP, Vista, or 7. Now let’s get started! Avoiding IP conflicts Since <\/p>\n","protected":false},"author":2,"featured_media":5592,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[19],"tags":[],"_links":{"self":[{"href":"https:\/\/www.practicallynetworked.com\/wp-json\/wp\/v2\/posts\/13"}],"collection":[{"href":"https:\/\/www.practicallynetworked.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.practicallynetworked.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.practicallynetworked.com\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.practicallynetworked.com\/wp-json\/wp\/v2\/comments?post=13"}],"version-history":[{"count":2,"href":"https:\/\/www.practicallynetworked.com\/wp-json\/wp\/v2\/posts\/13\/revisions"}],"predecessor-version":[{"id":7180,"href":"https:\/\/www.practicallynetworked.com\/wp-json\/wp\/v2\/posts\/13\/revisions\/7180"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.practicallynetworked.com\/wp-json\/wp\/v2\/media\/5592"}],"wp:attachment":[{"href":"https:\/\/www.practicallynetworked.com\/wp-json\/wp\/v2\/media?parent=13"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.practicallynetworked.com\/wp-json\/wp\/v2\/categories?post=13"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.practicallynetworked.com\/wp-json\/wp\/v2\/tags?post=13"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}