WSM User Guide - WatchGuard Technologies

Creating and Connecting a PPTP RUVPN on Windows 200012 Type the user name and passphrase for the connection.This information was given when you added the user to pptp_users. See “Adding New Users to the PPTP_UsersAuthentication Group” on page 282.13 Click Connect.Creating and Connecting a PPTP RUVPN on Windows 2000To prepare a Windows 2000 remote host, you must configure the network connection.From the Windows Desktop of the client computer:1 Click Start > Settings > Network Connections > Create a New Connection.The New Connection wizard appears.2 Click Next.3 Select Connect to the network at my workplace. Click Next.4 Click Virtual Private Network connection.5 Give the new connection a name, such as “Connect with RUVPN.” Click Next.6 Select to not dial (for a broadband connection), or to automatically dial (for a modem connection)this connection. Click Next.7 Type the host name or IP address of the Firebox® external interface. Click Next.8 Select Add a shortcut to this connection to my desktop. Click Finish.9 To connect with your new VPN connection, first make an Internet connection through a dial-upnetwork, or directly through a LAN or WAN.10 Double-click the shortcut to the new connection on your desktop.Or, select Control Panel > Network Connections and look in the Virtual Private Network list for the connection youcreated.11 Type the user name and passphrase for the connection.This information was given when you added the user to pptp_users. See “Adding New Users to the PPTP_UsersAuthentication Group” on page 282.12 Click Connect.Running RUVPN and accessing the InternetYou can enable remote users to get access to the Internet through a RUVPN tunnel. But this option hasan effect on security. See “Tunneling Methods” on page 231.1 When you set up your connection on the client computer, use the Advanced TCP/IP Settingsdialog box to select the Use default gateway on remote network check box.To open the Advanced TCP/IP Settings dialog box on Windows XP or Windows 2000, right-click theVPN connection in Control Panel > Network Connections. Select Properties and click theNetwork tab. Find Internet Protocol in the list box and click Properties. On the General tab, clickAdvanced.2 Make sure that the IP addresses you have added to the PPTP address pool are included in yourdynamic NAT configuration. To make sure, from Policy Manager select Network > NAT.3 Edit your policy configuration to allow connections from PPTP-Users through the external interface.If you use WebBlocker to control remote user web access, add PPTP-Users to the policy that controlsWebBlocker (such as HTTP-proxy).286 WatchGuard System Manager