Imagine you are out of the office and need to access a printer or file server on the office network. Unless you dial in to the company’s server, it is not possible for you to access the resources in the office. Moreover, using a dial-up line is not a cheap alternative (despite the slow speed), especially if you are overseas.
A Virtual Private Network (VPN) allows you to establish a secure, encrypted connection to the office’s network, all through a public network such as the Internet. Using a VPN, you can work as though you are connected to your company’s network.
There are two main types of VPN:
Tunneling is the process of encapsulating packets within other packets to protect their integrity and privacy during transit. A tunnel performs such tasks as encryption, authentication, packet forwarding, and masking of IP private addresses. Figure 4-1 shows a tunnel established between two computers through the Internet. Think of a tunnel as a private link between the two computers: whatever one sends to another is only visible to the other, even though it is sent through a public network like the Internet.
The following section discusses some tunneling protocols available for VPNs.
If you’re curious about what goes on under the hood of a VPN, there are three protocols that you need to know: PPTP, L2TP, and IPSec:
- Point-to-Point Tunneling Protocol (PPTP)
This was designed by Microsoft (and other companies) to create a secure tunnel between two computers. PPTP provides authentication and encryption services, and encapsulates PPP packets within IP packets. It supports multiple Microsoft networking protocols such as LAN to LAN and dial-up connections. However, it is proprietary and the encryption is weak.
- Layer 2 Tunneling Protocol (L2TP)
This works like PPTP, except that it does not include encryption. L2TP was proposed by Cisco Systems, and like PPTP, supports multiple networking protocols.
- IPSec
This addresses the shortcomings of L2TP by providing encryption and authentication of IP packets. As such, L2TP is often used together with IPSec to provide a secure connection.
In the following sections, I illustrate how to set up a VPN host as well as a client using two Windows XP Professional systems.
Let’s start with setting up the VPN host:
Select “Create a new connection”.
In the New Connection Wizard window, select “Set up an advanced connection” (see Figure 4-2). Click Next.
Select “Accept incoming connections”. Click Next.
In the next window, you can select the other devices to accept the incoming connection. Click Next.
Select “Allow virtual private connections” and click Next (see Figure 4-3).
Select the users that you want to allow to connect to your computer using the VPN connection (see Figure 4-4). Click Next.
The next window allows you to install additional networking software for this connection (see Figure 4-5). Click on Next to go to the next screen.
Click on Next and then Finish to complete the process.
To configure Windows XP to connect to a VPN:
On the desktop, right-click on Network Connections.
Select “Create a new connection”.
Select “Connect to the network at my workplace” (see Figure 4-6).
Select “Virtual Private Network connection” (see Figure 4-7). Click Next.
Enter a name for the VPN connection (see Figure 4-8). Click Next.
Select “Do not dial the initial connection”. Click Next.
Enter the IP address of the VPN server (see Figure 4-9). Click Next.
Select “My use only” (see Figure 4-10). Click Next.
Turn on the “Add a shortcut to this connection to my desktop” checkbox. Click Finish.
That’s it! When the process is completed, an icon is shown on the desktop (see Figure 4-11).
To connect to the VPN server, double-click on the icon and log in with your username information (see Figure 4-12). You can now work as though you are working on a computer in your office: most (if not all) of your network resources, such as file and print servers, will be accessible.
Warning
Resist the temptation to check the box titled “Save this user name and password for the following users” (see Figure 4-12). If you enable this, your password will be saved on your computer; if your computer is stolen or compromised, an attacker will be able to connect to the VPN and access everything it protects.
Tip
One common error that you might encounter has to do with setting a
proxy server in Internet Explorer.
For example, my ISP does not require me to use a proxy server when
surfing the Web. But when I connected to the VPN server in my
workplace, I was suddenly unable to connect to the Web. As it turns
out, my company requires me to use a proxy server to connect to the
Web. With the proxy server configured in IE (Tools →
Internet Options → Connections
→
Connection Name
→ Settings), I am now able to connect to the Web (see Figure 4-13).
Get Windows XP Unwired now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
