UniOTP VPN Solution

ABOUT THIS GUIDE

VPN (Virtual Private Network) refers to two different equipment (a computer and firewall) with VPN link capability which can form a secure tunnel over the internet. In the tunnel initiator (server), A user’s private data is encapsulated and encrypted, and then transmitted on the internet; in the receiver side (client), the received data is unpacked and decrypted. VPN services are installed with Windows 2000/2003. This manual is based on the installed VPN service, named Routing and Remote Access. You can find this service from Start→Program→Administrative Tools→Service.

ROUTING & REMOTE ACCESS

From Start→Program→Administrative Tools→Routing and Remote Access, please open the Routing and Remote Access panel. Right-Click on “Routing and Remote Access” on the left-side of the panel, please select “add server” to add a VPN server.

Right click on the added server, and select “Configure and Enable Routing and Remote Access”. If the Windows Firewall/Internet Connection Sharing (ICS) service is enabled, the Routing and Remote Access service cannot be enabled, and an ICS service warning message will appear. Disable the ICS service and redo the above operation. After turning on Routing and Remote Access, the following configuration wizard will appear.

Select Remote access (dial-up or VPN) and click next to get into the next page.

Finish VPN installation. The next step is configuration.

ENVIRONMENT CONFIGURATION

Right-click on the directory tree in the server name, select property and switch to the IP address tab.

If the connection is broadband routing, it is not necessary to modify the configurations in this page.

Using a static address pool will reduce the time to resolve an IP address, and will increase network speed

VPN SERVER WITH UNIOTP

After building a VPN Server successfully, open the Start→program→administrative Tools and open the Routing and Remote Access control panel.

Right-click on SECU-CA (local) and select property

Select security tab, and in the authentication provider (H) list, select “Radius authentication”. The “Configure” button will now become available as the following picture shows.

Please click on the “Configure” button to configure the Radius authentication server. The configuration panel appears.

Click on “Add” button to add a Radius authentication server.

In the following configuration panel, fill the UniOTP authentication server address in Server name.

Click on “Change” to change the Radius communication shared key. As with the following picture, please configure the communication shared key

Click on “OK” and the following content should appear indicating a Radius authentication server has been added. Click on “OK” to exit authentication server configuration.

Click on “Authentication Methods” button, as in the following picture:

In the “Authentication Methods” control panel select “Extensible authentication protocol (EAP)”, “Encrypted authentication (CHAP)” and “Unencrypted password (PAP)”.

After configuration, click on OK →Apply and exit the control panel.

Please note: “MS CHAP v2”, “MS-CHAP” and “SPAP” authentication methods are not supported.

To enable new configurations, restart VPN server.