Setup VPN on Client-Side
Now that you have installed and configured the Server-Side, the instructions below will walk you through setting up the VPN on the Client-Side Workstation:
1. Search for "VPN" on windows and click on it
2. Click on "Add a VPN connection"
3. Fill out the VPN information and save:
- VPN Provider: "Windows (built-in)"
- Connection Name: Whatever you want
- Server name or address: The host address or public ip address of the server.
- VPN Type: "Automatic"
- Type of sign-in info: "User name and password"
- User name: The rdp username of the user you use to remote in as
- Password: The rdp password of the user you use to remote in as
- Check the box for "Remember my sign-in info"
Allow VPN Split-Tunneling
You want to allow split-tunneling so that when you connect to the vpn, it doesn't disconnect you from your local network.
1. From the VPN settings, click on "Change adapter options"
2. Right Click on the adapter with the name of the VPN connection you created. In this case, I'll click on Sayse VPN. Then click on "Properties"
3. Click on the "Networking" tab and then double click on "Internet Protocol Version 4 (TCP/IPv4)"
4. Click on "Advanced..."
5. Uncheck the box that says "Use default gateway on remote network" and then select "Ok"
6. Now when you start the VPN it should not disconnect you from your network.
Firewall Rules
You need to allow GRE (aka protocol 47) to be allowed and TCP port 1723 to allow PPTP traffic inbound on windows firewall. Windows firewall has a predefined rule that you can use to make it easier to turn it on. Here are the steps:
1. Search for and Open "Windows Defender Firewall with Advanced Security"
2. Click on "Inbound Rules" and then click on "New Rule..."
3. Click on "Predefined:" and in the drop down menu find the option "Routing and Remote Access". Then click "Next".
4. Check the boxes for "Routing and Remote Access (PPTP-In)" and "Routing and Remote Access (GRE-In)". Then Click "Next".
5. Click on "Allow the connection" and click "Finish"
NOTE: There will be some servers that will already have the rule in place, while others won't. Always double check.