Installating NT4 RAS as VPN-Dialin to a Network

In this example, I use a Windows NT4 workstation as VPN-dialin to a Novell Netware network. Therefore, this page is using IPX as protocol, which makes this page slightly different from the RAS-installation described for NT4 Server.



Again, I did reload the Service pack 3 after each reconfiguration
(Service pack 3 was required due to another software package on my system)

I am starting with a Windows NT workstation configured for:

	As Protocol, I need: - IPX for connection to the Novell-server - TCP/IP for the connection to the Internet
	In addition to the regular Services, I use the "Client Services for Netware" for connection to Novell Netware servers.
	Remote Access Service is now loaded as additional service.
	We need to check our Bindings: (it is a long listed pasted together) Since we do NOT want any access from the Internet to our System, we deactivate all Bindings with TCP/IP to our Network adapter and to the Server and Workstation modules. For proper connection to the Novell Netware server, we MUST have valid bindings for the IPX protocol.

As for the Server RAS installation, we create a connection to the Internet and test it before continuing to install VPN.

We continue with the installation of VPN-dialin:
(again very similar to the procedure for NT4 server):

Under protocols, we install the VPN "Point to Point Tunneling Protocol (PPTP)"You will be prompted for the number of VPN-adapters: on Windows NT4 Workstation, ONLY ONE dialin is allowed, so select : 1

Under Services, configure RAS: First, ADD the VPN1 adapter to the list of RAS devices, then configure the VPN1 port: In this example ("receive calls only") to allow only incoming connections (again, NT4 workstation will ONLY allow ONE incoming connection. If you try to configure more, it will advise you to change to NT4 SERVER, which can handle up to 255 incoming connections) Then, configure the Network options for RAS, since we have now to define the RAS Server settings:

In this example, incoming connections are ONLY allowed to use IPX-protocol,
which is configured to allow clients access to the Entire network
(to allow access to the Novell Netware server).
This selecting will cause the message:

and you need to confirm with "YES". This will install:

	RIP for NWLink IPX which will handle the redirection of the IPX-protocol between the VPN-connection and your LAN connection
	We need to check the Bindings: RAS needs a binding to IPX. I do NOT know, why it does NOT show under the binding tab the adapters, which are allowed to use IPX.
	That information is available under the tab: Protocols by looking under the properties of the IPX-protocol: here is lists the binding to both the Ethernet board and to RAS.

That's it.
Make sure, that users have the permission to dial-in (using User Manager):


Make sure, that you now get a connection to the Internet (either a permanent
connection or via RAS-dialout, again very similar to Allowing Connection to Windows NT4 RAS-VPN Server) and you can receive incoming VPN-calls,
which you can verify via the "Dialup Networking Monitor":

Windows95/98 as VPN-Client dialing into a Novell network