{"id":1233,"date":"2013-05-11T19:51:17","date_gmt":"2013-05-11T12:51:17","guid":{"rendered":"https:\/\/sebayan9.wordpress.com\/?p=1233"},"modified":"2013-05-11T19:51:17","modified_gmt":"2013-05-11T12:51:17","slug":"how-to-setup-rras-for-vpn-server-pptp-windows-server-2008","status":"publish","type":"post","link":"https:\/\/rachmadona.net\/?p=1233","title":{"rendered":"How to Setup RRAS for VPN Server (PPTP) Windows Server 2008"},"content":{"rendered":"<p>In this article, I will share you step-by-step how to build VPN Server using PPTP method at Windows Server 2008. PPTP is less secure type of VPN but widely supported by many devices, even very old devices since Windows NT\/95. This VPN not recommended for who needs better security for VPN server. You must consider using L2TP, SSTP or IPSEC.<\/p>\n<p>Steps how to build VPN Server is listed below.<\/p>\n<p><strong>1. Add role RRAS<\/strong><\/p>\n<p>Start \u2013&gt; Administrative tools \u2013&gt; Server manager \u2013&gt; Add role<\/p>\n<p><a href=\"http:\/\/sebayan9.files.wordpress.com\/2013\/05\/image.png\"><img loading=\"lazy\" decoding=\"async\" title=\"image\" style=\"background-image:none;padding-top:0;padding-left:0;display:inline;padding-right:0;border-width:0;\" border=\"0\" alt=\"image\" src=\"http:\/\/sebayan9.files.wordpress.com\/2013\/05\/image_thumb.png\" width=\"266\" height=\"220\"\/><\/a><\/p>\n<p>Choose Remote access (dial-up or VPN).<\/p>\n<p><a href=\"http:\/\/sebayan9.files.wordpress.com\/2013\/05\/image1.png\"><img loading=\"lazy\" decoding=\"async\" title=\"image\" style=\"background-image:none;padding-top:0;padding-left:0;display:inline;padding-right:0;border-width:0;\" border=\"0\" alt=\"image\" src=\"http:\/\/sebayan9.files.wordpress.com\/2013\/05\/image_thumb1.png\" width=\"267\" height=\"221\"\/><\/a><\/p>\n<p>Choose VPN.<\/p>\n<p><a href=\"http:\/\/sebayan9.files.wordpress.com\/2013\/05\/image2.png\"><img loading=\"lazy\" decoding=\"async\" title=\"image\" style=\"background-image:none;padding-top:0;padding-left:0;display:inline;padding-right:0;border-width:0;\" border=\"0\" alt=\"image\" src=\"http:\/\/sebayan9.files.wordpress.com\/2013\/05\/image_thumb2.png\" width=\"268\" height=\"222\"\/><\/a><\/p>\n<p>Choose interface thas using for RRAS (VPN Server). Please uncheck \u2018Enable security on the selected interface..\u2019 if you don\u2019t want to setup any security or filter packets. If you persists to enable this option then have wrong configuration, your VPN server even your server can\u2019t be reach in your network.<\/p>\n<p><a href=\"http:\/\/sebayan9.files.wordpress.com\/2013\/05\/image3.png\"><img loading=\"lazy\" decoding=\"async\" title=\"image\" style=\"background-image:none;padding-top:0;padding-left:0;display:inline;padding-right:0;border-width:0;\" border=\"0\" alt=\"image\" src=\"http:\/\/sebayan9.files.wordpress.com\/2013\/05\/image_thumb3.png\" width=\"271\" height=\"224\"\/><\/a><\/p>\n<p>Then you must define whether the VPN client automatically get IP from your DHCP Server (if you have it) or use range static IP. If you choose range static IP but you have DHCP Server, then you must insert exclude IP at DHCP Server for VPN client.<\/p>\n<p><a href=\"http:\/\/sebayan9.files.wordpress.com\/2013\/05\/image4.png\"><img loading=\"lazy\" decoding=\"async\" title=\"image\" style=\"background-image:none;padding-top:0;padding-left:0;display:inline;padding-right:0;border-width:0;\" border=\"0\" alt=\"image\" src=\"http:\/\/sebayan9.files.wordpress.com\/2013\/05\/image_thumb4.png\" width=\"273\" height=\"226\"\/><\/a><\/p>\n<p>I just allowed 10 tunnel between 192.168.40.211-220. FYI, my network address is 192.168.40.0\/24.<\/p>\n<p><a href=\"http:\/\/sebayan9.files.wordpress.com\/2013\/05\/image5.png\"><img loading=\"lazy\" decoding=\"async\" title=\"image\" style=\"background-image:none;padding-top:0;padding-left:0;display:inline;padding-right:0;border-width:0;\" border=\"0\" alt=\"image\" src=\"http:\/\/sebayan9.files.wordpress.com\/2013\/05\/image_thumb5.png\" width=\"274\" height=\"227\"\/><\/a><\/p>\n<p>If you managing multiple Remote Access Servers, you should have RADIUS to control each remote access for better configuration. But, in this case we\u2019re not using RADIUS.<\/p>\n<p><a href=\"http:\/\/sebayan9.files.wordpress.com\/2013\/05\/image6.png\"><img loading=\"lazy\" decoding=\"async\" title=\"image\" style=\"background-image:none;padding-top:0;padding-left:0;display:inline;padding-right:0;border-width:0;\" border=\"0\" alt=\"image\" src=\"http:\/\/sebayan9.files.wordpress.com\/2013\/05\/image_thumb6.png\" width=\"278\" height=\"230\"\/><\/a><\/p>\n<p>Press Finish to complete.<\/p>\n<p><a href=\"http:\/\/sebayan9.files.wordpress.com\/2013\/05\/image7.png\"><img loading=\"lazy\" decoding=\"async\" title=\"image\" style=\"background-image:none;padding-top:0;padding-left:0;display:inline;padding-right:0;border-width:0;\" border=\"0\" alt=\"image\" src=\"http:\/\/sebayan9.files.wordpress.com\/2013\/05\/image_thumb7.png\" width=\"281\" height=\"233\"\/><\/a><\/p>\n<p><strong>2. Create VPN client<\/strong><\/p>\n<p>After we\u2019ve created VPN Server we need to create VPN client.<\/p>\n<p>Start \u2013&gt; Administrative Tools \u2013&gt; Active Directory Users and Computers (ADUC)<\/p>\n<p>Create new user, e.g \u2018VPN user\u2019.<\/p>\n<p><a href=\"http:\/\/sebayan9.files.wordpress.com\/2013\/05\/image8.png\"><img loading=\"lazy\" decoding=\"async\" title=\"image\" style=\"background-image:none;padding-top:0;padding-left:0;display:inline;padding-right:0;border-width:0;\" border=\"0\" alt=\"image\" src=\"http:\/\/sebayan9.files.wordpress.com\/2013\/05\/image_thumb8.png\" width=\"280\" height=\"236\"\/><\/a><\/p>\n<p>FYI, my domain name is SEMHQJKTNET. This is very important point when you create VPN client without using RADIUS because all PPTP is handled by RRAS which is the credentials taken from ADUC. The domain name must be entered on the VPN profile connection.<\/p>\n<p>Then after successfully created account vpnuser, right click choose properties and select Dial-in tab.<\/p>\n<p><a href=\"http:\/\/sebayan9.files.wordpress.com\/2013\/05\/image9.png\"><img loading=\"lazy\" decoding=\"async\" title=\"image\" style=\"border-top:0;border-right:0;background-image:none;border-bottom:0;padding-top:0;padding-left:0;border-left:0;display:inline;padding-right:0;\" border=\"0\" alt=\"image\" src=\"http:\/\/sebayan9.files.wordpress.com\/2013\/05\/image_thumb9.png\" width=\"273\" height=\"340\"\/><\/a><\/p>\n<p>On the Network Access Permission choose Allow access.<\/p>\n<p><strong>3. Setup forwarding for PPTP<\/strong><\/p>\n<p>Your router or DSL modem must support port forwarding feature to forward PPTP port (TCP 1723) from router to VPN server so it can handle if any VPN request from WAN.<\/p>\n<p><a href=\"http:\/\/sebayan9.files.wordpress.com\/2013\/05\/screenshot387.jpg\"><img loading=\"lazy\" decoding=\"async\" title=\"ScreenShot387\" style=\"border-top:0;border-right:0;background-image:none;border-bottom:0;padding-top:0;padding-left:0;border-left:0;display:inline;padding-right:0;\" border=\"0\" alt=\"ScreenShot387\" src=\"http:\/\/sebayan9.files.wordpress.com\/2013\/05\/screenshot387_thumb.jpg\" width=\"244\" height=\"140\"\/><\/a><\/p>\n<p>4. Make connection profile for VPN client<\/p>\n<p>This is the final step. You need to create VPN profile connection to establish VPN client to your company network. First you have to know your company public IP which is has been setup for forwarding PPTP port to your VPN server. If you don\u2019t know, please contact your network administrator.<\/p>\n<p>In Windows 7, to create VPN profile you just go to Start \u2013&gt; Network \u2013&gt; Network and sharing center \u2013&gt; setup a new connection or network \u2013&gt; Connect to a workplace<\/p>\n<p><a href=\"http:\/\/sebayan9.files.wordpress.com\/2013\/05\/image10.png\"><img loading=\"lazy\" decoding=\"async\" title=\"image\" style=\"border-top:0;border-right:0;background-image:none;border-bottom:0;padding-top:0;padding-left:0;border-left:0;display:inline;padding-right:0;\" border=\"0\" alt=\"image\" src=\"http:\/\/sebayan9.files.wordpress.com\/2013\/05\/image_thumb10.png\" width=\"344\" height=\"253\"\/><\/a><\/p>\n<p>No, create new connection \u2013&gt; use my internet connection (VPN) \u2013&gt; then fill the Internet address column with <strong>your public IP.<\/strong><\/p>\n<p>On the destination name put the name of VPN e.g Head Office<\/p>\n<p><a href=\"http:\/\/sebayan9.files.wordpress.com\/2013\/05\/image11.png\"><img loading=\"lazy\" decoding=\"async\" title=\"image\" style=\"border-top:0;border-right:0;background-image:none;border-bottom:0;padding-top:0;padding-left:0;border-left:0;display:inline;padding-right:0;\" border=\"0\" alt=\"image\" src=\"http:\/\/sebayan9.files.wordpress.com\/2013\/05\/image_thumb11.png\" width=\"350\" height=\"258\"\/><\/a><\/p>\n<p>Then on the next screen fill the username, password also Domain that we have created before. Then click connect.<\/p>\n<p><a href=\"http:\/\/sebayan9.files.wordpress.com\/2013\/05\/image12.png\"><img loading=\"lazy\" decoding=\"async\" title=\"image\" style=\"border-top:0;border-right:0;background-image:none;border-bottom:0;padding-top:0;padding-left:0;border-left:0;display:inline;padding-right:0;\" border=\"0\" alt=\"image\" src=\"http:\/\/sebayan9.files.wordpress.com\/2013\/05\/image_thumb12.png\" width=\"341\" height=\"251\"\/><\/a><\/p>\n<p><a href=\"http:\/\/sebayan9.files.wordpress.com\/2013\/05\/image13.png\"><img loading=\"lazy\" decoding=\"async\" title=\"image\" style=\"border-top:0;border-right:0;background-image:none;border-bottom:0;padding-top:0;padding-left:0;border-left:0;display:inline;padding-right:0;\" border=\"0\" alt=\"image\" src=\"http:\/\/sebayan9.files.wordpress.com\/2013\/05\/image_thumb13.png\" width=\"335\" height=\"247\"\/><\/a><\/p>\n<p>Voila! now you\u2019re connected to your company network.<\/p>\n<p><em>P.S : VPN doesn\u2019t work if you are on the same network on your company.<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"<p>In this article, I will share you step-by-step how to build VPN Server using PPTP method at Windows Server 2008. PPTP is less secure type of VPN but widely supported by many devices, even very old devices since Windows NT\/95. This VPN not recommended for who needs better security for VPN server. You must consider&hellip;<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[18],"tags":[328,351,372,373,478,505],"class_list":["post-1233","post","type-post","status-publish","format-standard","hentry","category-server","tag-pptp","tag-remote-access","tag-routing","tag-rras","tag-vpn-server","tag-windows-server-2008"],"_links":{"self":[{"href":"https:\/\/rachmadona.net\/index.php?rest_route=\/wp\/v2\/posts\/1233","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/rachmadona.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/rachmadona.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/rachmadona.net\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/rachmadona.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1233"}],"version-history":[{"count":0,"href":"https:\/\/rachmadona.net\/index.php?rest_route=\/wp\/v2\/posts\/1233\/revisions"}],"wp:attachment":[{"href":"https:\/\/rachmadona.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1233"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/rachmadona.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1233"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/rachmadona.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1233"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}