Installating NT4 RAS as VPN-Dialin to a Network
In this example, I use a Windows NT4
workstation as VPN-dialin to a Novell Netware network. Therefore,
this page is using IPX as protocol, which makes this page slightly different
from the RAS-installation
described for NT4 Server.
Again, I did reload the Service pack 3
after each reconfiguration
(Service pack 3 was required due to another software package on
I am starting with a Windows NT workstation configured for:
||As Protocol, I need:
- IPX for connection to the Novell-server
- TCP/IP for the connection to the Internet
||In addition to the regular Services,
I use the "Client
Services for Netware"
for connection to Novell Netware servers.
||Remote Access Service is
as additional service.
||We need to check our Bindings:
(it is a long listed pasted together)
Since we do NOT want any access from
the Internet to our System, we deactivate
all Bindings with TCP/IP to our Network
adapter and to the Server and Workstation
For proper connection to the Novell Netware
server, we MUST have valid bindings for
the IPX protocol.
As for the Server RAS installation, we
create a connection
to the Internet and test it before
continuing to install VPN.
We continue with the installation of VPN-dialin:
(again very similar to the procedure for NT4 server):
||Under protocols, we install the VPN
"Point to Point Tunneling Protocol (PPTP)"You
will be prompted for the number
on Windows NT4 Workstation, ONLY ONE
dialin is allowed, so select : 1
||Under Services, configure
First, ADD the VPN1 adapter to the list of
RAS devices, then configure the VPN1 port:
In this example ("receive calls only")
allow only incoming connections
(again, NT4 workstation will ONLY allow
connection. If you try
to configure more, it will advise you
to change to NT4 SERVER, which can
handle up to 255 incoming connections)
Then, configure the Network options for
RAS, since we have now to define the
RAS Server settings:
In this example, incoming connections are ONLY
allowed to use IPX-protocol,
which is configured to allow clients access to the Entire
(to allow access to the Novell Netware
This selecting will cause the message:
and you need to confirm with "YES".
This will install:
||RIP for NWLink IPX
which will handle the redirection of the
IPX-protocol between the VPN-connection
and your LAN connection
||We need to check the Bindings:
RAS needs a binding to IPX.
I do NOT know, why it does NOT show
under the binding tab the adapters,
which are allowed to use IPX.
||That information is available under
the tab: Protocols by looking under the
properties of the IPX-protocol:
here is lists the binding to both the
Ethernet board and to RAS.
Make sure, that users have the permission to
dial-in (using User Manager):
Make sure, that you now get a connection to the Internet (either a permanent
connection or via RAS-dialout, again very similar to Allowing Connection to Windows
NT4 RAS-VPN Server) and you can receive incoming VPN-calls,
which you can verify via the "Dialup Networking