Command Center

When I was today installing openvpn once I had everything configured, I got these errors.

On the server side.

Connection refused (code=111)

and on the client side.

TLS Error: Unroutable control packet received

After googling for a while I found the solution, all have to be with the time in both sides (server and client) so the solution is.

install rdate      

apt-get rdate

and then sync the clocks on both pcs.

rdate -s 129.6.15.28

OR

#yum install -y ntp

#ntpdate 0.pool.ntp.org

REFERENCES

http://www.go2linux.org/troubleshooting-openvpn

For the Small Office/Home Office (SOHO), Windows XP Professional VPN features are a real boon.

Traveling users with laptops or handheld computers will inevitably want files on the home network; you just can't bring everything with you. This is where the beauty of the Windows XP Professional computer connected to an always-on connection, such as DSL or cable modem, shines. That always-on link can be used to accept incoming VPN connections and allow your mobile users to access shared folders and files on your private network.

In this article, I’ll explain how to configure a Windows XP Professional computer to accept incoming VPN connections and discuss some tips on improving the remote access experience for the VPN client computer user.

Windows XP’s all-in-one VPN solution

Windows XP Professional is designed as the one-stop solution for the SOHO, taking all the usability features available to Windows Me users and adding the powerful networking features available in Windows 2000. The combination lets you create the ideal remote access solution for the SOHO.

The Windows XP Professional remote access server capabilities are very similar to those available in Windows 2000 Professional. A Windows XP computer can accept a single incoming connection on each interface that can accept a connection. For example, a Windows XP machine can accept incoming connections on each of the following interfaces:

Dial-up modem serial interface

Infrared interface

Parallel port interface

VPN interface

While it’s unlikely, a Windows XP Professional machine with the above configuration could conceivably accept up to four simultaneous RAS connections. However, the typical configuration consists of a single RAS client connection, either through a dial-up modem interface or a VPN interface.

Create an incoming connection with the New Connection Wizard

Like Windows 2000 Professional, Windows XP Professional includes a New Connection Wizard. I’ll show you how to use the New Connection Wizard to create the new VPN server interface. In this example, I’ll assume the Windows XP Professional machine is not a member of a Windows NT 4.0 or Windows 2000 domain. The machine has two network interface cards; one is directly connected to the Internet, and the other is connected to the internal LAN. In addition, the external interface of the machine is configured for Internet Connection Sharing (ICS). While ICS changes the IP address of the LAN interface of the ICS computer to 192.168.0.1 through 16, it's easy to change the IP address to one that fits the existing network environment. The IP address of the LAN interface of the ICS computer was changed to 10.0.0.1 through 24 to fix the preexisting network configuration.

How to create the VPN server interface, step-by-step

1. Click Start | Control Panel.

2. In the Control Panel, open the Network Connections applet.

3. In the Network Connections window (see Figure A), open the New Connection Wizard.

Figure A




The Network Connections window

4. On the Welcome To The New Connection Wizard page, click Next.

5. On the Network Connection Type page (see Figure B), select the Set Up An Advanced Connection option.

Figure B

On the Advanced Connection Options page (see Figure C), select the Accept Incoming Connections option and click Next.

Figure C




Configuring XP to accept incoming connections

7. On the Devices For Incoming Connections page (see Figure D), you can select optional devices on which you want to accept incoming connections.

Figure D




Note that you are not presented with any of the network interfaces on the computer.

8. On the Incoming Virtual Private Network (VPN) Connection page (see Figure E), select the Allow Virtual Private Connections option and click Next.

Figure E

9. On the User Permissions page (see Figure F), select the users that are allowed to make incoming VPN connections. Click Next.

Figure F




Any user that isn’t selected won’t be able to initiate an incoming connection.

10. On the Networking Software page (see Figure G), click on the Internet Protocol (TCP/IP) entry and click the Properties button.

Figure G




Configuring TCP/IP properties

11. In the Incoming TCP/IP Properties dialog box (see Figure H), place a check mark in the Allow Callers To Access My Local Area Network check box. This will allow VPN callers to connect to other computers on the LAN. If this check box isn’t selected, VPN callers will only be able to connect to resources on the Windows XP VPN server itself. Click OK to return to the Networking Software page and then click Next.

Figure H




Granting LAN access to callers

12. On the Completing The New Connection Wizard page, click Finish to create the connection.

After the Incoming Connection is complete, right-click on the connection in the
Network Connections window and select the Properties command (see Figure
I).

Figure I




Accessing the properties of the VPN server link

Years and years ago before VPN (Virtual Private Network) became a common term for the corporate workforce, Microsoft created PPTP (Point to point Tunneling Protocol). Like VPN, PPTP allows you to securely connect to remote networks such as your home network or your friends/parents PC’s (in the event they need some tech support…).

Additionally, the nice thing about Microsoft PPTP is you don’t need $10k of dedicated VPN hardware or a Network Admin to set it up. All you need is a Windows 7 PC and 3 minutes to read this groovy How-To Tutorial!

How To Set Up A Home VPN / PPTP Host Using Windows 7

1. Click the Windows Start Orb and Type network connections into the search bar. Then Click the Network Connections link.

2. In the Network Connections window if the File menu isn’t available Hold Alt, then Click New Incoming Connection…

3. Check which users will be allowed to use the connection, you add a new user if you like. Click Next to continue.

4. Check the box Through the Internet then Click Next.

5. Select Internet Protocal Version 4 (TCP/IPv4) and then Click Properties. In the Properties window Check the box to Allow callers to access my local area network, and Set Assign IP addresses automatically using DHCP. Now return to the previous window and Click Allow access.

6. Voila, the VPN host connection is now created! We’re not done yet though, now we need to make sure that the gateway firewall (router) on your network is routing the internet PPTP traffic to your Windows 7 Box.

7. From your internet browser Type in your Router Network Address. This is usually 192.168.1.1 or 192.168.0.1 by default on most home networks. Once you’ve accessed your router interface, some routers have the option to enable PPTP passthrough as well as other VPN ports. If this option isn’t available for your router, you can adjust this with port forwarding in the next step.

8. If your router doesn’t have a built-in VPN setting, you can manually open your PPTP VPN port. Under Port Range Forwarding Create a New forward. Set the Start to 1723 and the End to 1723. The protocol should be Set to TCP and the IP Address needs to be set to your local network IP address.

Once the firewall rules are setup it will forward all VPN / PPTP traffic to your Windows 7 box. From there your remote computer will be able to access all the network devices on your home network (Other computers, servers, etc…)

One thing to note – as great as PPTP is, RDP is probably the easier way to access your home network however RDP is limited to remote control only so if your looking to copy files sitting on your home server/PC, using a Home VPN / PPTP is probably the best option.

REFERENCES

http://www.howtonetworking.com/VPN/win7vpn1.htm

http://www.sevenforums.com/tutorials/4517-virtual-private-network-vpn-enable-incoming-vpn-connections.html

http://www.groovypost.com/howto/microsoft/setup-vpn-pptp-host-on-home-windows-7/

[How To] Set Up A VPN outgoing Connection in Windows 7

First of all, please note that this how-to uses the built-in network setup right in Windows 7, so it works the best if VPN server on the other side is also from Windows Server.

Open up network and sharing center from Control Panel, and choose Set up a new connection or network.

There are two options in the Connect to a Workplace window. 99% of the time you just need to pick the first option, unless your company only allows you to dial in using a phone line.

Type in the address in either domain name or IP address, and name the connection in the destination name box. And click Next.

You can leave all user login info blank if you feel safe that way in the next window. And click Create. You’re all set if you see the next window as below.

To launch it, simply click the small network icon on the system tray at the bottom right corner, and pick the connection we just created from the popup list, and connect.

Type in your user name and password, and you are on your way connecting your Windows 7 to your company network.

REFERENCES

http://www.windows7hacker.com/index.php/2009/08/how-to-set-up-a-vpn-connection-in-windows-7/

Configure your Computer to Accept VPN Connections in Windows 7

Hi friends,


I know that many people don't know how to Configure there Computer for
accepting VPN Connections in Windows 7.There are basically two
connection in Vpn one for Incoming & another for outgoing.

Following
are the steps for configuring Incoming VPN Connection in Windows 7

1. First go to Control Panel and
   open Network and Sharing Center.
   
2. Click on Change adapter
   settings.
   
3. Press Alt+F and select New Incoming connection
   
4. Put
   a check on who you’d like to give access to this computer or you can
   configure a new account by clicking on Add someone,after that click on
   Next.
   
5. Put a check mark on Through the Internet. Click on
   Next.
   
6. Select the protocols you want to enable for this
   connection. Click on Allow access.
   
7. Make a note of the
   Computer name as this will be used by the client to connect to this
   computer and after that Click on Close.
8. 
   

Following are the steps for configuring Outgoing VPN Connection in
Windows 7

1. First go to
   Control Panel and open Network and Sharing Center.
   
2. Click on
   Set up a new connection or network.
   
3. Select Connect to a
   workplace then click on Next.
   
4. Select Use my internet
   connection (VPN).
   
5. Type the IP address or computer name where
   you wish to connect and your connection name under the Destination name
   field.
   
6. Enter a User name and password that has been granted
   access to the host computer.
   
7. For getting connected through
   created VPN connection, you can either right-click on the Network icon
   in the system tray and select Network and Sharing Center or go to
   Control Panel and open Network and Sharing Center, and click on Connect
   to a network.
   
8. Now connect VPN Connection windows will
   appears.