In Windows 2000, how do I make a VPN connection to the IU network using PPTP?

On this page:

• Introduction
• Creating a VPN connection
• Configuring your VPN connection
• Establishing a VPN connection

Introduction

This document explains how to manually set up a VPN connection in Windows 2000 at Indiana University Bloomington and IUPUI. UITS recommends that you set up a VPN connection to IU for Windows 2000 by using the VPN Installers, available from the IUware CD or from IUware Online at:

This software automatically does what the instructions in this document describe how to do manually.

Before creating a VPN connection, make sure your copy of Windows 2000 is running the latest service pack. To scan your computer and download the service packs and updates you need, visit Microsoft Windows Update at:

If you are unsure which service pack is currently installed on your computer, see In Windows, how can I tell which service packs are installed? For more information on obtaining updates for Windows 2000, see For Windows, how can I get software updates and patches?

Note: IU's VPN is intended for individual computing accounts only. Group and departmental accounts cannot access the VPN. See Why can't I make a VPN connection through an IU group or departmental account?

Note: To access the wireless network at Indiana University Bloomington or IUPUI, if you are a student, faculty member, or staff member, you must register your computer. See At IUB and IUPUI, how do I register my computer? (If you are visiting IU and using a Network Access account, instead see At IUB and IUPUI, what is a Network Access account, and how do I get one?) For information about accessing the IU Secure wireless network, see What is IU Secure? If the IU Secure network is not available in the area where you are connecting, use a VPN connection for added security and full access to IU resources.

Creating a VPN connection

To create a VPN connection to the IU network in Windows 2000, either wirelessly or remotely:

1. Right-click My Network Places and select Properties.
   
   
2. In the Network and Dial-up Connections window, double-click the Make New Connection icon to open the Network Connection Wizard. Click Next.
   
   
3. Select Connect to a private network through the Internet, and then click Next.

   Note: If the Connect to a Virtual Private Network through the Internet option is not available, you may need to enable the Remote Access Connection Manager service. For more information, see In Windows 2000 or XP Professional, why is the option to create a VPN connection unavailable?

4. If your computer already has a Dial-Up Networking icon, at this point you may see the following message:

   "Windows can automatically dial the initial connection to the Internet or other public network before establishing the virtual connection."

   If you don't see the above message, proceed directly to the Destination Address window (see step 5). If you do see the message, do the following:

   1. In the Public Network window, you must tell Windows what public network connection you will use to attach to your VPN:
      
      
      • If you are connected to a persistent Internet connection (e.g., Ethernet), choose Do not dial the initial connection.
      • If you must dial in to connect to the Internet, choose Automatically dial this initial connection and select your Internet service provider (ISP) connection.
      
      
   2. Click Next.
      
      
5. In the Destination Address window, type the hostname or address of your VPN server and click Next.

   Use the table below to find your VPN server for both remote (e.g., cable modem, DSL, or outside Internet service provider) and wireless VPN connections:

   Campus	VPN server
   IU Bloomington	pptp.indiana.edu
   IU East	vpn.iue.edu
   IU Kokomo	vpn.iuk.edu
   IU Northwest	149.162.8.2
   IUPUI	pptp.iupui.edu
   IU South Bend	vpn.iusb.edu
   IU Southeast	vpn.ius.edu

6. In the Connection Availability window, select the option most appropriate for your situation, and then click Next.

   Note: If you are using a wireless card and wish to log into a domain (including ADS) upon starting Windows 2000, you must select For all users. Selecting this option will make the VPN connection available when you choose Log on using dial-up connection at the login screen.

7. On the next screen, type a name for your new connection (e.g., IU-VPN ). If you want a shortcut icon on your desktop for the new connection, select Add a shortcut to my desktop.
   
   
8. Click Finish to complete the connection. You now should see your new connection under "Network and Dial-Up Connections".

   Note: You may be presented with a login screen to get connected to the VPN server instead. You still need to complete the following steps, so do not log in yet. Continue to the following section.

Configuring your VPN connection

To configure your connection for the IU VPN servers:

1. If you have proceeded here from the previous steps and see the VPN login box, click the Properties button.

   If you don't see the login box, locate and select the VPN connection icon, and then right-click and select Properties from the menu that appears.

2. Click the Options tab, and select Prompt for name and password, certificate, etc. and Include Windows logon domain.
   
   
3. Click the Networking tab. Set "Type of VPN server I am calling:" to Automatic.
   
   
4. In the "Components checked are used by this connection" field, only the following should be checked:
   
   
   • Internet Protocol (TCP/IP)
   • File and Printer Sharing for Microsoft Networks
   • Client for Microsoft Networks
   
   
5. Select TCP/IP, and then click Properties.
   
   
6. Select both Obtain an IP address automatically and Obtain DNS server address automatically. Click OK.
   
   
7. Click the Security tab.
   
   
8. Select Advanced (custom settings), and then click Settings.
   
   
9. Under "Logon Security", select Allow these protocols and make sure the only checkbox selected is Microsoft CHAP Version 2 (MS-CHAP v2). Then click OK.

Establishing a VPN connection

1. Double-click the new connection icon. When prompted, enter your ADS username and password. In the "Logon domain:" field, enter ADS . Click Connect.

   Note: It may take up to a minute to establish a connection with the VPN server. Please be patient. If you have problems connecting, note any error messages and contact your campus Support Center.

2. When the connection is established, you should see a new icon in the system tray. This icon is identical to the one for dial-up connections.
   
   
3. To disconnect and terminate the connection, double-click the icon in the system tray and choose Disconnect.

Also see:

• The basics of VPN at IU
• In Windows 2000, why does my VPN connection to IUB or IUPUI stop responding?
• Using a Lucent ORiNOCO wireless card in my laptop computer, why am I sometimes not able to connect?
• In Windows XP, how do I make a VPN connection to the IU network?
• What is IPsec?