How to Install VPN on Windows Server 2008 R2 | Thomas Maurer

1 di 16

HOME

ABOUT

CONTACT

OCT

07

2010

87
Comments

TV CHANNEL

TWITTER

http://www.thomasmaurer.ch/2010/10/how-to-install-vpn-on-windows-se...

LINKS

SUBSCRIBE

HOW TO INSTALL VPN ON WINDOWS

SERVER 2008 R2

ABOUT

POSTED IN IT, MICROSOFT, SOFTWARE, WINDOWS, WINDOWS SERVER,

WINDOWS SERVER 2008 R2, WORK

8
submit

by
Thomas Maurer

My Name is Thomas

Share
Tweet
Like

8
47

This HowTo should show you how to install a VPN Server on

Windows Server 2008 R2. This is a HowTo for a small
environment or a stand-alone hosted Server.

Maurer. Microsoft MVP

for Hyper-V. Work as a
Cloud Architect for
itnetx gmbh, a
consulting and
engineering company

1. Install the Role Network Policy and Access Services with

the Server Manager

located in
Bern/Switzerland. I am
focused on Microsoft
Technologies, especially
Microsoft Cloud
Solutions based
Microsoft System Center,
Microsoft Virtualization
and Windows Azure.
Follow @ThomasMaurer

10/3/2015 12:29 PM

How to Install VPN on Windows Server 2008 R2 | Thomas Maurer

2 di 16

http://www.thomasmaurer.ch/2010/10/how-to-install-vpn-on-windows-se...

SPONSOR
2. Select the Role Services Routing and Remote Access
Services

SPONSOR

3. Configure and Enable Routing and Remote Access in the

Server Manager.

SUBSCRIBE
RSS FEED
ATOM FEED
ADD TO
GOOGLE
MY YAHOO
TWITTER
GOOGLE

10/3/2015 12:29 PM

How to Install VPN on Windows Server 2008 R2 | Thomas Maurer

3 di 16

http://www.thomasmaurer.ch/2010/10/how-to-install-vpn-on-windows-se...

PROFILE
SPONSOR

4. Choose Custom Configuration if you just have one

Network Interface in the Server

SPONSOR

5. Choose VPN access

TAGS
APPLE AZURE CISCO CISCO
UCS

CLOUD CLUSTER

DATACENTER ESXI EVENT

HARDWARE

HYPER-V

MICROSOFT
MVP PICTURES

6. Finish and click next

POWERSHELL
PRIVATE CLOUD

SCVMM SERVER STORAGE

SURFACE SWITZERLAND

SYSTEM CENTER

10/3/2015 12:29 PM

How to Install VPN on Windows Server 2008 R2 | Thomas Maurer

4 di 16

http://www.thomasmaurer.ch/2010/10/how-to-install-vpn-on-windows-se...

SYSTEM CENTER 2012

SYSTEM CENTER 2012 R2
SYSTEM CENTER 2012 SP1
UCS UPDATE VIRTUAL HOME

VIRTUALIZATION
VIRTUAL MACHINE

VIRTUAL MACHINE
MANAGER VM VMM
VMWARE

WINDOWS
7

WINDOWS

WINDOWS 8 WINDOWS

AZURE WINDOWS PHONE

WINDOWS POWERSHELL

WINDOWS
7. Allow access for users Network Access Permission. You
can set that in de Dial-In Tab under the User Premission.

SERVER

WINDOWS

SERVER 8 WINDOWS

SERVER 2008 R2

WINDOWS
SERVER 2012
WINDOWS SERVER
2012 R2

8. Open Ports in your Firewall

For PPTP: 1723 TCP 47 GRE
For L2TP over IPSEC: 1701 TCP 500 UDP
For SSTP: 443 TCP
Optional: If you dont have a DHCP Server in your local network
you have to add a static address pool. This could be if you have a
stand-alone Server by your provider.
1. Right click on Routing and Remote Access and open
Properties

10/3/2015 12:29 PM

How to Install VPN on Windows Server 2008 R2 | Thomas Maurer

5 di 16

http://www.thomasmaurer.ch/2010/10/how-to-install-vpn-on-windows-se...

2. Click on the IPv4 Tab and check Static address pool

3. Add a static address pool of private IP addresses

4. Add secondary IP Address to the Server network interface

which is in the same subnet as this pool.

Tags: Access Services L2TP Microsoft network Policy

10/3/2015 12:29 PM

How to Install VPN on Windows Server 2008 R2 | Thomas Maurer

6 di 16

http://www.thomasmaurer.ch/2010/10/how-to-install-vpn-on-windows-se...

Network Policy and Access Services

Ports

PPTP

routing and remote access services

SSTP

static address pool

Virtual Private Network

VPN

Windows

Remote Access

role

routing

Windows Server

Windows Server 2008 R2

Previous Post

Next Post

87 Responses to How to Install VPN on Windows Server 2008 R2

Oatz says:
MARCH 9, 2012 AT 3:41 PM

Thanks Thomas you rock!

Saa says:
MARCH 15, 2012 AT 2:13 PM

Thanks! Could you explain how do i make authentication? so that people

that connect to my server via wireless antenna, since this will be a
hotspot server need to make an account.. need sql for that? can it be
done directly? thanks!

vishnumuthoor says:
MARCH 29, 2012 AT 7:42 AM

thank you and please tell me what other procedures i do for connect my
lap to our server through vpn

Thomas Maurer says:

APRIL 1, 2012 AT 12:07 PM

10/3/2015 12:29 PM

How to Install VPN on Windows Server 2008 R2 | Thomas Maurer

7 di 16

http://www.thomasmaurer.ch/2010/10/how-to-install-vpn-on-windows-se...

You have to create a New VPN Connection in the Network and Sharing
Center

Thierry Hunting says:

APRIL 10, 2012 AT 2:17 PM

Thanks for the excellent guide Thomas. I got this working for
administrators now.
I also need to give normal users access to this; but if I do that Im
getting the following message: RAS 800 or RAS 812.
Can you please help me out?
Thanks Thierry

Mike says:
MAY 2, 2012 AT 1:59 PM

Fantastic, easy to follow guide!

Ive got it all setup but cant seem to access the internet through my
VPN. Any suggestions?

Spider says:
MAY 3, 2012 AT 6:28 PM

Thanks sir..!
Its so easy to understand..

Thomas Maurer says:

MAY 4, 2012 AT 8:26 PM

10/3/2015 12:29 PM

How to Install VPN on Windows Server 2008 R2 | Thomas Maurer

8 di 16

http://www.thomasmaurer.ch/2010/10/how-to-install-vpn-on-windows-se...

no problem

Fazar Susanto says:

MAY 30, 2012 AT 6:25 AM

Cool Website!
Like This Yoo

Scott says:
JUNE 5, 2012 AT 11:18 PM

Your instructions work for a standalone PPTP and L2TP VPN server but
on a standalone server I cant add a certificate for the SSL Certificate
Binding property under the Security tab. Im resigned to the idea that
Microsoft wont accomodate a stand alone SSTP VPN server under its
Network Policy and Remote Access Service. Do you know if this is true?
Also if I try to set up a VPN server on an Amazon EC2 Windows 2008 R2
instance, Im limited to a single NIC and am not allowed to add a
secondary IP address to it. Any ideas as to whether a stand alone
Windows VPN server in this scenario is do able or not is appreciated.

Kirby says:
JUNE 22, 2012 AT 5:00 AM

Im in a migration process. I hope this will help to setup the VPN.

Ricsan E. Galve says:

JUNE 29, 2012 AT 9:57 AM

Thank You Sir, this could really help to me..

JR says:

10/3/2015 12:29 PM

How to Install VPN on Windows Server 2008 R2 | Thomas Maurer

9 di 16

http://www.thomasmaurer.ch/2010/10/how-to-install-vpn-on-windows-se...

JULY 5, 2012 AT 9:51 PM

for the ports can u specify if i need to put same as inbound and private
port??

How to Install VPN on Windows Server 2012 | Thomas Maurer

JULY 29, 2012 AT 5:37 PM
[] For a VPN server on Windows Server 2008 R2 check this post: How to Install VPN on Windows Server
2008 R2 []

Kimi says:
OCTOBER 3, 2012 AT 6:23 PM

Hi Thomas.i just to know how many client server connection will be

allowed if win 2008 server act as a vpn server.

ilikecoding says:
DECEMBER 7, 2012 AT 3:06 AM

We have a DSL modem in our office, a wireless ASUS router and a file
server. I need to provide 5 people access through VPN to a share on the
file server (2008 r2). The router supports VPN server. So, i have set it up
to allow up to 10 clients and has an ip pool assigned to VPN clients. Do i
also need to setup VPN access per your article on the server? If yes, then
do the logins for the VPN server on the router (username and password)
need to be the same as the computer account logins?

mohamad says:
JANUARY 22, 2013 AT 7:02 PM

hi thanks
error 812???????
radious port set ????
my network workgroup

10/3/2015 12:29 PM

How to Install VPN on Windows Server 2008 R2 | Thomas Maurer

10 di 16

http://www.thomasmaurer.ch/2010/10/how-to-install-vpn-on-windows-se...

vijay says:
FEBRUARY 11, 2013 AT 4:39 PM

Very nice,.., Easy to understand.,,.,.:)

Joseph Nguyen says:

APRIL 15, 2013 AT 4:43 AM

Thanks Thomas !

Paul says:
APRIL 23, 2013 AT 5:24 PM

Tried it but server crashed. Meaning nobody could have access to shared
drives .

Markus says:
MAY 3, 2013 AT 9:44 AM

Did you place the server in the DMZ or did you open the listed ports
towards your internal server.
If you placed the server in the DMZ, did you do it with one network
connection (only DMZ) or with 2 connections (one DMZ one Internal
Network)?
With best regards
Markus

Thomas Hagstrand says:

MAY 23, 2013 AT 9:57 AM

10/3/2015 12:29 PM

How to Install VPN on Windows Server 2008 R2 | Thomas Maurer

11 di 16

http://www.thomasmaurer.ch/2010/10/how-to-install-vpn-on-windows-se...

Hi. I have made a simular installation. But with a dynamic DHCP cause I
have a DHCP on the same server. My problem is that I wish to use other
IP adresses then whats on my Server Vlan. I have 4 other Vlans for
ekonomy, produktion, IT, Guest. I wish to assign ip adress after what
group the user that loggs on to the VPN is assignd too. is that possible?
the only solustion I have found yet is. set up 4 diffrent VPN connections
and assign diffret access in a Network access policy. With that a static
pool of addresses but I am afraid the result will be addess will be
blocked in ether switch or router cause it comes from the wrong vlan.
another problem is that it will conflict with the addresses in the DHCP
and might cause an ip conflict. Is it possible to make it access a spessific
DHCP POOL on the server? to avoid that problem?

Esam says:
JUNE 23, 2013 AT 8:37 PM

Hi Thomas,
May you explain more about this point
4 Add secondary IP Address to the Server network interface which is
in the same subnet as this pool.

Thomas Maurer says:

JULY 4, 2013 AT 8:15 PM

Well on the network interface you may have a public IP address from your
hoster. You also have to added a secondary private IP address to the
interface

10/3/2015 12:29 PM

How to Install VPN on Windows Server 2008 R2 | Thomas Maurer

12 di 16

http://www.thomasmaurer.ch/2010/10/how-to-install-vpn-on-windows-se...

Bob says:
JULY 7, 2013 AT 4:18 AM

Hi Thomas,
Is there any possible to configure VPN to allow only with SSTP ? ( Clients
must have certificate to access the VPN)

How to Install VPN on Windows Server 2012 R2 | Thomas Maurer

JANUARY 11, 2014 AT 5:06 PM
[] How to Install VPN on Windows Server 2008 R2 []

nirmal says:
JULY 24, 2014 AT 8:08 AM

Hi thomas,
As per your screen shots, i have done everything & one IP has been
given as the secondary Ip in the interface also.
Now Can I know that My server has the VPN?

Ray Gay says:

SEPTEMBER 5, 2014 AT 9:34 PM

Step 7 is important even if you have set an inclusive (Domain users

permitted) remote access policy in the RRAS mmc. The policy seems to
be ignored or overridden on a 2003 DC. Giving the user explicit
permission in ADU&C works.

BuddhaBash add port says:

OCTOBER 1, 2014 AT 8:49 PM

you forgot to mention to port 3389 TCP (RDP port) to get it working but
thats ok cuase after 5 hours figuring GRE is not a port but a protocol (ne

10/3/2015 12:29 PM

How to Install VPN on Windows Server 2008 R2 | Thomas Maurer

13 di 16

http://www.thomasmaurer.ch/2010/10/how-to-install-vpn-on-windows-se...

need to configure port for that) i stumbled on a youtube video showing

the RDP port and guess what BINGO!!!

Jonas says:
OCTOBER 3, 2014 AT 1:46 AM

Hi Thomas,
Great tutorial, very helpful indeed! Would you be able to help me with
configuring my VPS to start with? I use Windows Server 2008 R2 and
have a private, static IP.
Thanks a lot!

MM says:
OCTOBER 15, 2014 AT 3:03 PM

Hi, thanks for tutorial, nice!

Im trying to configure in the server, a printer installed in a client of VPN.
My server is in 192.168.0.0 network
In the VPN client computer, network have the same pool, 192.168.0.0
Which is the correct configuration for this case?
I was testing different configurations, but if I configure a DHCP server on
win2k8, with same pool (192.168.0.110/190), I can see from the server
the printer of client, but the client loose connection with your network. If
the client computer have a network printer, this one will be offline when
the VPN is connected!

Razu says:
NOVEMBER 3, 2014 AT 9:43 AM

I have a server 2008 r2 .how could i connect this server for using cloud
server.what should i do as a administrator and what necessary device i
needed.please give the total solution.

10/3/2015 12:29 PM

How to Install VPN on Windows Server 2008 R2 | Thomas Maurer

14 di 16

http://www.thomasmaurer.ch/2010/10/how-to-install-vpn-on-windows-se...

Abdul says:
NOVEMBER 26, 2014 AT 7:48 PM

Hi Thomas
Can you please explain me what configurations are required on a DSL
router to connect an internal RAS server with private IP address. The RAS
server is running with 2k8 R2. The users are at remote locations they
want to connect using the Public IP of DSl router.
Thank You

suman.ponnala says:
DECEMBER 9, 2014 AT 6:04 AM

Hello,
I have to configure VPN server on windows server 2008 R2. I am having
static IP. But the static ip connection terminates at my router. From the
router we are accessing the Internet. I have few questions.
1)To configure VPN Server, do we need seperate Static ip connection
which terminates at Public interface card? Should I connect the Public
Internet cable directly to the Public interface card or Can I assign the
Public IP(which terminates at router) on Public interface card?
Please suggest me, I dont have much idea about networking. I was given
a task to configure VPN server. I am new to widows server. Week ago I
have established VPN server by using the forums in google but now I am
unable to access my private network. Earlier I have accessed my private
network through VPN server. I have given the Public IP(which was
terminated at router) on public interface card and enabled port
forwarding to the private IP which I have configured on Windows server
Private interface.
2)Is it mandatory that we need to configure 2 IPs(Public and private) for
VPN server setup. Please help me out.

Randy says:
MARCH 21, 2015 AT 2:10 AM

we have one server, it has been intalled 2008 r2 and Remote access , join
in a domain , the server has 2 netcard, one connected the

10/3/2015 12:29 PM

How to Install VPN on Windows Server 2008 R2 | Thomas Maurer

15 di 16

http://www.thomasmaurer.ch/2010/10/how-to-install-vpn-on-windows-se...

intranet(10.8.1.200, 255.255.255.0, GW 10.8.1.1), the other is connected

the internet(203.208.211.172, 255.255.255.248, gw 203.208.211.169),
reference this guide, deployed VPN only, the client is dailed vpn success,
however, client ping 203.208.211.172 is ok, ping 10.8.1.x is ok , ping
10.8.2..x is not ok, we checked the intalltion process, The installation
process did not find an error, check the port (1723,47,1701,500,443) are
open, Now the reason can not find the problem, please help speculate
about the possible direction of the problem, thanks a million!

Norb says:
APRIL 15, 2015 AT 7:37 PM

47 is not a port for GRE. 47 is the protocol ID for GRE. You only need to
open TCP port 1723.

sameer says:
AUGUST 7, 2015 AT 8:17 AM

thanks bussy.:)

Older comments

Leave a Reply
Your email address will not be published. Required fields are marked *

Name *

Email *

Website

Comment

10/3/2015 12:29 PM

How to Install VPN on Windows Server 2008 R2 | Thomas Maurer

16 di 16

http://www.thomasmaurer.ch/2010/10/how-to-install-vpn-on-windows-se...

Post Comment

Notify me of followup comments via e-mail. You can also subscribe

without commenting.

Previous Post

Copyright 2008-2015 Thomas Maurer

Next Post

Home About Twitter Contact Subscribe

10/3/2015 12:29 PM