Question:

Answer:

To configure VPN over IPSec, you will need to edit your registry, set up IPSec, and then set up your L2TP connection.

1. Edit your registry to create the ProhibitIPsec key.
   1. From the Start menu, select Run.
   2. In the Open text box, type: regedit
   3. Click OK.
   4. Go to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RasMan\Parameters.
   5. From the Edit menu, select New, and then select DWORD Value. A text box will appear.
   6. In the text box, type: ProhibitIPSec
   7. Press the Enter key.
   8. Double-click ProhibitIPSec.
   9. In the Value Data text box, type: 1
   10. Click OK.
   11. Close the Registry Editor.
   12. Restart your computer.
2. Download the IPSec policy file.
   1. Go to the Notes on Using Virginia Tech's VPN Pilot Service page (https://rdweb.cns.vt.edu/~cgaylord/vpn/).
   2. In the User Name text box, type your PID.
   3. In the Password text box, type your PID password.
   4. Click OK.
   5. Click the W2k Ipsec Policy File for VPN link.
   6. Save the file to your desktop.
3. Import the IPSec policy.
   1. Click the Start button, select Settings, and then select Control Panel.
   2. Double-click the Administrative Tools icon.
   3. Double-click the Local Security Policy icon.
   4. In the left pane, select IP Security Policies on Local Machine.
   5. From the Action menu, select All Tasks, and then select Import Policies.
   6. From the Look In drop-down list, select Desktop.
   7. Select the VT-VPN-Policy.ipsec file.
   8. Click the Open button.
   9. Select and assign the appropriate policy.
      Note: For assistance, contact your network administrator.
      • To block the NetBIOS over TCP/IP (NBT) protocol: Right-click Encrypt VPN; Block NBT, and select Assign.
      • To allow the NetBIOS over TCP/IP (NBT) protocol: Right-click Encrypt VPN; Allow NBT, and select Assign.
4. Set up your L2TP connection.
   1. From the Start menu, select Settings, and then select Control Panel.
   2. Double-click the Network and Dial-up Connections icon.
   3. Double-click the Make New Connection icon.
   4. Click Next.
   5. Select the Connect to a Private Network through the Internet option.
   6. Click Next.
   7. In the Host Name or IP Address text box, type: IPSec.cns.vt.edu
   8. Click Next.
   9. Select the For All Users or Only for Myself option.
   10. Click Next.
   11. In the Type the Name You Want To Use for This Computer text box, type: Virginia Tech L2TP Over IPSec
   12. Click Finish. The Connect to Virginia Tech L2TP Over IPSec window will open.
   13. Click the Properties button.
   14. Select the Security tab.
   15. Select the Advanced option.
   16. Click the Settings button.
   17. Select the Allow These Protocols option.
   18. Place a check in the Unencrypted Password (PAP) check box.
       Note: Although your password will be sent unencrypted, the tunnel is encrypted through IPSec.
   19. Click OK.
   20. Click the Yes button.
   21. Click OK.
   22. In the Username text box, type your PID.
   23. In the Password text box, type your PID password.
   24. Click the Connect button.