How to erect a VPN server on a Win2003 server _win server

By setting up a VPN service on a U.S. server or VPS, you can access some of the domestically blocked sites, such as Facebook, Twitter, and so on. Of course, it is immoral to never use this tool to access pornographic and political websites. If you are building a VPN on a VPS based on Virtuozzo virtualization technology, please contact your service provider to open the VPN function on the parent server, otherwise you cannot configure it further. If the VPS is based on Xen or hyper-V technology, it can be configured directly. Before I configure VPN, in the Internet is difficult to find step-by-step configuration article, also did not attach picture description, now I write out the configuration steps, and attach a screenshot for later reference.

The first step is to open the Control Panel-> Administrative Tools-> Service project and disable the Windows Firewall service.

In the second step, open the Control Panel-> management tool and double-click Routing and Remote Access. Then right click on the server icon and click "Configure and Enable Routing and Remote Access."

In the third step, in the Routing and Remote Server Setup Wizard, select Custom Configuration.

The fourth step is to check VPN access and NAT and Basic Firewall.

Fifth step, click "Finish". System prompts "Do you want to start a service?" ", select Yes."

The sixth step, then start configuring Routing and Remote Access, we first click on the local service next to the + button, the left menu to expand, and then click the IP routing next to the + button.

Step seventh, configure the static IP address below. Right-click the local service, click Properties, and then click the IP tab.

The eighth step, click "Static address Pool", tap "add". Enter a starting IP address and end IP address range, the recommended input 192.168.1.100 to 192.168.1.254 this range, because 192.168 segments belong to the local reserved IP segment. Finally click "OK".

The Nineth step, right click on "Static Route", and then click "New Static Route".

Step tenth, the target and netmask are entered in 0, and the gateway is consistent with the default gateway in the TCP/IP properties.

Step 11th, delete the internal item in the DHCP Relay agent.

The 12th step, then right click on "DHCP Relay Agent", and then click "New Interface."

13th step, select "Local Area Connection", click "OK", then click "OK" in the pop-up dialog box.

The 14th step, right click on "nat/Basic Firewall", then click "New Interface", then select "Local Connection", click "OK".

The 15th step, in the pop-up dialog box, click "Public interface to connect to the Internet", then check "Enable NAT on this interface", and then click "OK".

The 16th step is to complete the configuration in Routing and Remote Access. The following is a step to add a VPN user to the Computer Management to add a user, as a VPN connection user, to place the user under the Guest group and set to "Allow access" in the user properties-> dial-in-> remote access permission. Then you create a new VPN connection on your own computer and dial the test. To determine whether the connection is successful, please visit the http://www.ip138.com IP query site to see if the IP of foreign servers can be displayed.