I. Model

Following is the model VPN clients to site

As models on the client will then connect to their sites through the Internet environment, after the connection is a node on their sites is 1 or node in the LAN, when it can make the exchange of data back to the PC in your LAN.

II. The purpose applications

With the development of media like this now, the exchange of data back and no longer Basket in an environment which means that it offers a wider, more flexible. For example, to connect sites of a company together that it is about how far each other, if the environment through the Internet, to ensure the exchange of data back and forth between both sites before this, it usually applied by particular type of lease channels (Lease line) But this becomes very expensive, so the recent years VPN technology was born on that aspect.

The purpose of the VPN is to allow us access between sites, or to the client sites through the Internet environment, then combined with the firewall will ensure reliability and safety data through a road pipe (pipe) is creating its own virtual environment on the Internet’s VPN technology.

The use VPN gives us pretty much benefit as well as cost savings compared to a lot of hiring their own channels.

III. How to proceed:

For this model (Client to site) the requirements as follows:

Machine role is the VPN server must have 2 NIC, this will directly go out through the Internet ADSL Modem, can specifications as follows:

As specifications on the machine role Server are 2 times Nic strategies are:

External: 10.0.0.100
Internal: 64.16.100.1

When will create an Address Pool (IP blocks) available in advance for clients with demand back VPN so that the same NetID with LAN parties is the site.

There are 2 ways to do the following:

One is: ADSL Modem Bien Bridge to 1, then we’ll get Public IP, IP is used for IP VPN Server, though quite how this inconvenience is that when we have to follow the Net with their new clients may have the net is out. (Valid until the modem does not support VPN)

Second: On the ADSL modem I will combine with the VPN Dynamic DNS Server, then if the client back then I just Nat Port forward through the VPN Server is, in general how this quite complicated one billion compared with the first First, and will be applied in the model sites to site (will continue to research). Here we will follow the 1 pair with the client to site.

IV. Configure the modem Bridge (Implementation on Zoom X4)

First we logging into ADSL Modem as follows:

Enter the correct username and password and click OK, look and feel of the Web Modem will be very friendly to us configuration, and please note the following important part:

In the Encapsulation select as follows:

Enable and functions Bridge over the files on.

Next we should remove the modem to the NAT, because back when ISP connection by the PPPoE protocol of course, we turn on VPN server and then, so do not need more and Nat do the following:

Then we go back to part of Advance to Enable Modem function Bridging up as follows:

We should attention to parts such as the Interface Name, Add them must form a Inteface eoa-0, the new successful because then we turn out new WAN and Enable Bridging up:

To view this as our ADSL Modem has become a Bridge, now to the next step below.

V. Setting up VPN Server:

Before the client can call in or be accessible to your network, you need to install VPN server. The first step is to Enable Routing and Remote Access Service (RRAS).

This step, you do not need to install because it was built when you install the Windows operating system. However, although have been installed by the windows, but it has not yet been Enable, so to be able to Enable RRAS, you can follow the following steps:

1. Select start, select Programs, select Administrative Tools, select Routing and Remote Access (RRAS).
2. In the Routing and Remote Access Console, right click the server name and select Enable Routing and Remote Access. After a few seconds in the state will Activate as follows:
3. Then RRAS Wizard will start. In this section you should select Manually configured server and click Next in the form below.

Right click on the name server and Chọn properties

We CHECK Check the boxes as to ensure that allows the client back to the VPN.

Next we PPP tab and select Check on the options as follows:

The following is a very important part, we select the tab IP as follows:

Check into the options as to ensure that allows routed when the client connection and can see the network plans.

In group Ip address, we have 2 options, either to give every self-VPN server IP allocated for quay to the client when (using DHCP), or we will pre-regulation 1 day that the IP when the client back to it will receive in the series that Ip (use Static IP). But note, if you use Static, the day Ip must NetID with the NetID of Interface network inside our Lan.

Then we have to specify what will be routed Interface and IP for the client?

We choose Interface is Ext (Interface is directly connected to the quay ISP)

Next please Right click on Ports choose Properties to configure the port, address (domain name) for the VPN server as follows:

Select PPTP protocol type and click Configure ...

Note that in 2 CHECK option on, in the Phone number we fill in the IP to that when we turn connected to the ISP level. However, this is not very effective as easily occurred situation Disconnect then we have to dial back to the ISP and ask for IP and then back again to fill out this IP, resulting in very inconvenience.

How to overcome the negative point of view is: We should register a domain name free at the site: www.no-ip.com, www.dyndns.org (Vd: athenvpn.dyndns.org) then we will have a real IP, however it is not the IP that we put on the VPN server from ISP. To synchronize the domain name with IP ISP’s modem that we hold, we use a name is TOOL: DynDNS Updater Tool Free download at this page www.dyndns.org TOOL When installed this we will select the domain have been published Update signed and, at this time that the IP Modem will keep pushing up the name of this domain.

Then we selected branches Remote Access policies and Edit as follows:

Check into a remote option … Grant. To allow connections from outside to.

Click on Edit Profile Check and skip the authentication as follows:

Up to here as we’ve finished configuring VPN Server section, next to us will continue to be configured for the VPN client.

V. Setting up VPN Client:

For this section, it is very simple, we just know only for the client’s IP VPN server or domain name (eg: athenavpn.dyndns.org) to back only.

First we go to Network Connections as follows:

Double clicking New Connection Wizard will show Wizard dialog box, clicking Next, we’ll come to dialog following:

We selected as Connect to the Network at My Workplace and click Next

Choose a connection type under VPN and click Next

In the host name or IP address we enter the IP address of the VPN Server or domain name (eg: ex.dyndns.org) and click Next and Finish. Then we try to turn VPN server.

If we perform properly, only a few seconds later, connect to the VPN server will be set up, but conversely be connected Fail we check the configuration section.

In summary this article only speak briefly in a small model of the client to site, but we will continue to research additional sites for the VPN to site associated with DynDns,

Nat port … without having to make ADSL Modem Bridge.