Navigate to System Tools Local Users and Groups Users, as shown

170 | Lesson 8 account. From here, you can give permissions to users to allow access to the VPN server. We will use the administrator account as our example.

c. Right click Administrator and select Properties. This displays the General tab

of the Administrator Properties dialog box.

d. Click the Dial-in tab.

e. In the Network Access Permission box, select the Allow access radio button.

Then click OK. f. Make note of the administrator password; you will need it to connect from the client.

3. Configure the VPN client by installing a VPN adapter:

a. Go to the Windows client computer. Verify that it is connected to the same

network as the server.

b. Click Start, then right click Network. This displays the Network and Sharing

Center window.

c. Click the Set up a new connection or network link.

d. Click Connect to a workplace and click Next.

e. Select the Use my Internet connection VPN option.

f. In the Internet address fi eld, type the IP address of the server.

g. Give a name to the VPN connection in the Destination name fi eld. Then click Next.

h. Type in the user name and the password of the administrator account on the

server. Click Next. At this point, the VPN adapter should connect to the VPN server. The adapter in the Network Connections window should read VPN Connection on the second line, as shown in Figure 8-5, which tells you that it is connected. If it was disconnected, the VPN adapter would be grayed out, and it would read Discon- nected. By the way, the third line should read WAN Miniport PPTP. This tells us that we have made a PPTP connection, which is the default type of connection. To make L2TP connections, you would have to do a bit more confi guring on the server and the client side. If you do not wish to use the administrator account, make sure you use another account that has administrative rights on the server. TAKE NOTE If Windows asks you to set up an Internet connection, select the option to set up one later. TAKE NOTE Figure 8-5 A VPN connection in its con- nected state

i. You can also tell whether you are connected to a VPN server using the com-

mand prompt. Access the command prompt and type the following command: ipconfi g all This should show the VPN connection and the Local Area Connection. Note the IP address of the Local Area Connection. Then note the VPN connection IP address. It should be on the same network, and it was applied by the VPN server. An example is shown in Figure 8-6. Defining Network Infrastructures and Network Security | 171 There you have it: a basic VPN connection. What we did is a simulation because we only did it on a LAN between computers. Still, if the Internet were involved, the process would work the same way. Some companies actually implement LAN VPN connections for added security. Keep in mind that every time you encrypt, encapsulate, or otherwise change data, it slows down the network and uses more resources. When you are finished with the exercise, reset all systems back to normal. SHOW VPN FUNCTIONALITY ON A ROUTER GET READY. VPN devices can also come in the form of appliances and routers. For example, the D-Link DIR-655 router we used previously can be set up to accept incoming VPN con- nections with the PPTP or L2TP protocols. Let’s examine where to go on the router to set this up. 1. Access the D-Link DIR-655 router at the following link: http:support.dlink.comemulatorsdir655133NAlogin.html 2. Log in no password is required.

3. Click the Setup link at the top of the screen.

4. Click the Manual Internet Connection setup button.

5. In the Internet Connection Type drop-down menu, select PPTP Username

Password. This will modify the rest of the details of the page. Note that you can also select L2TP from this list. 6. Scroll down to PPTP Internet Connection Type. 7. From here, you need to select either static or dynamic IP. If you have received a static IP address from your ISP, select the Static IP radio button and enter the IP information. If you are receiving a dynamic IP from the ISP, select the Dynamic IP radio button. This will gray out the PPTP IP Address, PPTP Subnet Mask, and PPTP Gateway IP Address fields. Figure 8-6 Ipconfig showing results of VPN adapter