
	Home > Networking Channel Project Guides > Virtual Private Networking Services > Building & Deploying a VPN > Vista VPN setup guide, part 1: How to configure Windows Server 2008

Project Guides: Virtual Private Networking Services:

EMAIL THIS

START

CHOOSING A VPN

BUILDING & DEPLOYING A VPN

SECURITY

TROUBLESHOOTING

WIRELESS / MOBILE VPNS

VENDORS

Building & Deploying a VPN

<< PREVIOUS | NEXT >>: IPsec VPNs: Identity and authentication options

TIPS & NEWSLETTERS TOPICS

VIRTUAL PRIVATE NETWORKS (VPNS)

Vista VPN setup guide, part 1: How to configure Windows Server 2008

Brien M. Posey
06.08.2008
Rating: -4.67- (out of 5)

Networking Channel Update

Digg This! StumbleUpon Del.icio.us

Service provider takeaway: Value-added resellers (VARs) and networking consultants can help businesses provide remote access to users by setting up a virtual private network with Windows Vista and Windows Server 2008.

A virtual private network (VPN) can be extremely useful to your customers, but setting up a VPN can be somewhat complicated. This is especially true for Windows Server 2008, which offers many more options than Windows Server 2003. This guide will walk you through a step-by-step VPN setup process. VPN setup solutions come in both hardware and software, but for the purposes of this guide, I explain a software approach to setting up a VPN using Microsoft Vista products. In part 1 of this guide we take a step-by-step approach to configuring Windows Server 2008. In part 2 of the Vista VPN setup guide we configure Windows Vista workstations.

But before we dig into configurations, let's look at the software and hardware requirements for setting up a Vista VPN. You need two separate Windows 2008 servers and at least one remote client running Windows Vista. The first Windows 2008 server is basically an infrastructure server. It must act as a domain controller, DHCP server, DNS server and certificate authority. If your customer already has a Windows 2008 network in place, you don't need to sell them another server to fit this role.

Any Windows 2008 domain will already have at least one domain

Vista VPN setup guide, part 2

Learn how to configure Windows Vista workstations in part 2 of our Vista VPN setup guide.

controller and one server acting as a DNS server. Most Windows 2008 networks are also running DHCP services. If these services are already in place, your only concern is setting up a certificate authority (which I show you how to do in Step 3). For now, you just need to know that the server acting as a certificate authority must be running Windows Server 2003 or Windows Server 2008 Enterprise Edition.

The second server you need is a VPN server. Windows Server 2008 ships with the necessary software, but you do need two network interface cards (NICs): One will connect to the Internet and the other will connect to the private corporate network.

Before we move on to setting up a domain controller, let's consider server placement. Both servers will connect to the private network via a hub or switch. Only the VPN server will have external connectivity. However, it's a security risk to connect the VPN server directly to the Internet. It's best to place a firewall in front of the VPN server so you can filter out everything but VPN traffic.

Vista VPN setup guide, part 1

Introduction
Set up a domain controller
Install DHCP services
Install Active Directory Certificate Services
Install IIS
Request a machine certificate
Install the Routing and Remote Access Service role
Configure the VPN server
Publish the Certificate Revocation List
Make the CRL accessible

Brien Posey

About the author
Brien M. Posey, MCSE, is a Microsoft Most Valuable Professional for his work with Windows 2000 Server and IIS. Brien has served as the CIO for a nationwide chain of hospitals and was once in charge of IT security for Fort Knox. As a freelance technical writer he has written for Microsoft, TechTarget, CNET, ZDNet, MSD2D, Relevant Technologies and other technology companies. You can visit Brien's personal Web site at http://www.brienposey.com.

Rate this Tip
To rate tips, you must be a member of SearchNetworkingChannel.com. Register now to start rating these tips. Log in if you are already a member.

Digg This!

StumbleUpon

Del.icio.us

<< PREVIOUS | NEXT >>: IPsec VPNs: Identity and authentication options

VIEW ALL IN THIS CATEGORY

RELATED RESOURCES

2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems

Search Bitpipe.com for the latest white papers and business webcasts

Whatis.com, the online computer dictionary

DISCLAIMER: Our Tips Exchange is a forum for you to share technical advice and expertise with your peers and to learn from other enterprise IT professionals. TechTarget provides the infrastructure to facilitate this sharing of information. However, we cannot guarantee the accuracy or validity of the material submitted. You agree that your use of the Ask The Expert services and your reliance on any questions, answers, information or other materials received through this Web site is at your own risk.

SEARCH

TechTarget provides enterprise IT professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective IT purchase decisions and managing their organizations' IT projects - with its network of technology-specific Web sites, events and magazines.


TechTarget Corporate Web Site \| Media Kits \| Reprints \| Site Map All Rights Reserved, Copyright 2006 - 2008, TechTarget \| Read our Privacy Policy