Hi, Nick i have seen almost every major topic video you created to counter check on our technique and get various thing to keep for us. Thus i found your video very helpful in terms of detail explanation regarding every topic you made for those who are in the filed IT & Acting as Admin somewhere to cope at their end on a quick way. Overall provided info, clear voice and step you created relevant to topic are quite good. Keep providing more tips & tricks. Thanks
I know this relatively old topic, but does the 2012 VPN server have to be connected to the ISP's gateway? Does the server need 2 nic cards in it? One for the ISP gateway, and one attached to the local network? I have a laptop connected to the ISPs gateway, with one of the 5 IP addresses that we're allowed to use to mimic someone trying to access the server from outside our network. I have yet to make it work. I'll try and go back to the begging and run your setup routine. BTW, did you have to open up 1723 on your local router? I didn't see that.
Hi. I Used prettymuch the same settings, I also added NAT and some firewall settings. My goal is to make my VPN accessable from other networks, but I only can connect to it from the local network. Do you have any suggestions? In advance, Thank you!
Excellent demonstration. I have a VPN through a Cisco ASA from an outside company and need a virtual MS 2012 to be able to connect. The host server is 2016. How do I get them to be able to see the Virtual as well as the current machine which is an old 2008 Server? The firewall has everything opened to their router, but they cannot see the new machine. The 2008 is the DNS server and is configured appropriately. I can log into the machine with local remote desktop without an issue. Thanks
Very good summary. A couple of questions if I may. 1. Will this mechanism allow RDP client access from iPad using one of the available clients? 2. Will this deter/divert any DoS/Remote attacks on my (changed) RDP ports? :)
Hello NLB solutions, Your video was of great help. But i want to confirm one thing, When i went through other resources of tutorials on configuring VPN , many have mentioned about port forwarding to be done on router. I did not find any such thing mentioned onyour tutorial. So please confirm if this(Port Forwarding) is to be done or not. And another doubt is whether or not to change anything on security tab of VPN connection properties. Whether or not to enable the check box saying "Microsoft CHAP version 2"
Hi Akhil, thank you for the support. Yes, you are right I only mentioned the need to open ports on your firewalls/routers in order for your VPN to work, but did not show on how it is done. This information is mentioned in the Tips and Tricks section of the video and in the video description.
great video! one question, after the client pc has connected to the vpn server, if that server 2012 also has a file server on it..will the client be able to see all the shared folder and access them? and can i access this remote server by any other OS? or can it only be accessed by a windows client os?
Hi Kratosgamer, thank you for the support. 1. Yes, the client will be able to access the shares even if they are not on the same VPN server, as far as they are part of the same domain/network. 2. Yes, this should be working on other client OS as well. They will need to support the PPTP protocol though.
NLB Solutions thanks again! I ordered a new modem in order to do the port forwrding. just in case it messes up I can put the other one back. when I have some free time I will be checking out more of your videos. stay well!
hi i have a question im a student in it course and i have a problem with the remote desktop, i try to connect from my windows 10 to my server and it says i have an connected sessoin already but there is no sessoins connected. i have done many thigs but they just dont work. we saw that my first network card does not want to connect and when we tried with my wan card with the school ip it worked can you help me please
I have a Question. I Want to connect external computers to my Windows 2012 server, I have CisCo router where I have Server. Can someone please follow up me with what steps I need to carry out?
A Very Good demonstration for a learner, but had a question. Can this VPN service replace the existing VPN solutions in the market, like what we use now to connect to our office network from home. If yes, how secure is this compared the VPN solutions. Please reply
Hi Ramsmallkay,, thank you for the support. Depending on what solution you are using in your company. There are great 3rd party VPN solutions that are very secure and flexible. Remote access is a great native feature in Windows that can help you achieve the same, but this option is not as secure. I recommend using SSTP, IPSec or IKEVv2 VPN solution. SSTP in Windows Server 2016 tutorial - ruclips.net/user/edit?o=U&video_id=1xAXqmN9tiU
Hello! First just let me say, great video, simple but clear. I have a question, I want to access my server from outside the local network, will it work using a dynamic dns? I know i have to open the PPTP port in my router, but is there anything else i have to do?
Hi 4smm, thank you for the support! Now for the work, I assume you mean dynamic IP? Using a dynamic IP address should be fine for non production, test only environments. You just need to keep track of the external IP address that you have. Well you need to open the PPTP port on the router and forward it to the internal IP address of the VPN server.
Thank you so much for the response. I'm talking about a dynamic dns. Like no IP, or dyndns. Instead of configuring the client with the server local ip, I would use something like mynameserver.ddns.net. Is it possible? In theory I think so, but I'm not a pro :P
Thanks for the video! Quick question, I have a client server running Windows 2012R2 with RAS working fine. However I built a new server in a remote location and although it connects and joins a new VPN session to that RAS box nothing happens. It would be good to demonstrate that if you connect to a RAS in which there is no local DHCP server at that end - how does your connection at your end work? I am trying to join this remote server to the Domain in which the RAS server resides but its only getting an APIPA address. I assume I need to go into the VPN advanced settings within IPv4 and set a static. ? :) staceman
Hello Staceman, yes you are right. You can assign a static pool of IP addresses, and they will be given upon connecting to the RRAS server. Good luck !
Hi, i would like to know if the VPN server can be same DC ? and how do i configure two network interfaces one for internal and other for wan ? if i can get a video link it will be great.. Thanks
Can we join my frnds windows 10 client pc which on different network of different locations to my domain controller server pc which is on my local network
I follow your procedure but I am getting "The PPP Link Protocol Was Terminated on Windows 10" and can not see the warning on the event viewer. Please, let me know how to solve it.
Thank you for the great tutorial. I want to apply this solution out of LAN (via Internet), what do I have to do, in addition to redirecting port 1723 from the fixed and explicit IP address of the router on the local IP server? I needed UNC access via VPN. Thanks!
Thanks man for the great demonstration. But what if my server was not joined with any domain and I want to make VPN connection from my home using Windows 10? I mean, I rent a virtual server somewhere in the internet and I need to use it as a personal VPN.
Hi Fahad, although I have not tried this you should be able to configure it. Most of the settings like accounts and IP addresses for the VPN can be configured on the server. If you are going to do it, I would be more than thankful if you share the experience. Thank you for the support!
Error 800: The remote connection was not made because the attempted VPN tunnels failed. The VPN server might be unreachable. If this connection is attempting to use L2TP/IPsec tunnel, the securityparameters required for IPsec negotiation might not be configured properly. Any suggestions??
Hi there, does the client OS must be WIN PRO in order to work with VPN through domain credentials access? Or it's working on WIN HOME also? Nice video, thank you for upload!
Hi Madvih, good question - props. As for the Win Home edition you should be able to connect it via VPN, but I think there are multiple limitations, that will make the experience, lets say a bit difficult as Home editions are not domain joinable.
hi thakyou for this video i manage to create VPN from our local network. but i want to access VPN outside my network then connect it through VPN . i have already set a port foward on my WAN but no luck. any ideo i got 800 error during connecting. thankyou!
Hi john, this article is very detailed on VPN errors and should help you look into the right direction - blogs.technet.microsoft.com/rrasblog/2009/08/12/troubleshooting-common-vpn-related-errors/
Hi Pawel, you will need to configure your firewall/router to forward the traffic to your VPN server and you will be able to connect from other networks.
Thanks man for your effort and help. Could you make a video or just explain here how can restrict users to open web sites if in my server 2012 r2 missing group internet explorer maintenance?
Dont we have to obtain a static IP address from our ISP first before we can remote into our server from outside our home. I was told the Ip address s has to be set static in order to remote into out network...Nice video
Hi MLS, yes and no. Although using a static IP address can help you to have a single IP to connect to you can use your dynamic IP but you need to know it first and it will change a lot. Dynamic DNS should be implemented for a dynamic IP.
Im referring to remoting in from the outside world. I am not referring to being within your network and remoting in to a local with your a local 192,etc..ip.
My server says it needs resources when i install the role.. all the resources that i have i tried.. but nothing worked.. can you help me out with this one please?
Hi subramani, should not be that difficult to implement use the following guide from MS - blogs.technet.microsoft.com/rrasblog/2009/07/02/how-to-configure-network-load-balancing-nlb-based-cluster-of-vpn-servers/
hi, can you please confirm whether the IP 192.168.142.26 is Jessie's system's internet IP ? coz i am a bit unclear as to when you double click on the Work VPN you enter Jessie's domain credentials to login to VPN, how it allowed jessie to log into VPN server without specifying the domain name during login
+vishal desai 192.168.142.26 is the internal IP address of my VPN server. This is a lab environment and I used my internal network to test if the VPN connection. In real life scenarios instead of using the internal IP the client will have to use external IP or hostname to connect. When you connect with VPN you can use the username without domain specified (if you have issues with authentication, you can try with domain\username).
Hi, Excellent tutorial but could you please explain the IP address of the card on the server. The local and the external card and which one get the gateway and which one doesn't? Thank you
Great Video! I have issue with configuration of VPN on Windows server 2016. Its shows below error The Routing and Remote Access service terminated with the following service-specific error: A device attached to the system is not functioning. Event ID : 7024 Source : Service Control Manager. Can you please provide me solution for this?
Hi, Nick i have seen almost every major topic video you created to counter check on our technique and get various thing to keep for us. Thus i found your video very helpful in terms of detail explanation regarding every topic you made for those who are in the filed IT & Acting as Admin somewhere to cope at their end on a quick way. Overall provided info, clear voice and step you created relevant to topic are quite good. Keep providing more tips & tricks. Thanks
Thankx for breaking it down.. great tutorial for beginners
At 16:55 you selected VPN access only. You did not select Dial-up access. What's the difference, please? Thanks... Joe
Hi Arctic you can check this guide - technet.microsoft.com/en-us/library/cc787124(v=ws.10).aspx#w2k3tr_dura_what_xcmw
amazing tutorial, nice and comprehensive and professionally done. keep it up!
Great Video.. I've been struggling to configure a vpn server properly but this was perfect
Thank you, Ron! Happy I was able to help.
At 14:39 this video.
When I am Click the Tools menu. Select "active Directory Users and Computers" is not displayed.
What do I do?
Hi Mr. Keramati, this step needs to be done on your domain controller.
I know this relatively old topic, but does the 2012 VPN server have to be connected to the ISP's gateway? Does the server need 2 nic cards in it? One for the ISP gateway, and one attached to the local network? I have a laptop connected to the ISPs gateway, with one of the 5 IP addresses that we're allowed to use to mimic someone trying to access the server from outside our network. I have yet to make it work.
I'll try and go back to the begging and run your setup routine. BTW, did you have to open up 1723 on your local router? I didn't see that.
Hi. I Used prettymuch the same settings, I also added NAT and some firewall settings. My goal is to make my VPN accessable from other networks, but I only can connect to it from the local network. Do you have any suggestions? In advance, Thank you!
Excellent tutorial, very detailed and meticulous, plus your English is perfect too.
Thanks for making this, am now subscribed.
FACTS!!!!!! Thank you so much man, you're the best!!!!!!!!!
Awesome!!! Ur videos are just to the point. nice
Thank you, Tapas! Much appreciated!
Wow, Amazing work brother, thanks for helping us.
Excellent demonstration. I have a VPN through a Cisco ASA from an outside company and need a virtual MS 2012 to be able to connect. The host server is 2016. How do I get them to be able to see the Virtual as well as the current machine which is an old 2008 Server? The firewall has everything opened to their router, but they cannot see the new machine. The 2008 is the DNS server and is configured appropriately. I can log into the machine with local remote desktop without an issue. Thanks
Nice and clean explanation, thanks NLB.
Hi Bro, this video for only server already joined domain?
Excellent tutorial. Thank you
Thanks for the help with VPN, it's been a while since I did this.
Thank you for the support Mike !
Love your stuff! Big help!
Simple and nice explanations
Very good summary. A couple of questions if I may. 1. Will this mechanism allow RDP client access from iPad using one of the available clients? 2. Will this deter/divert any DoS/Remote attacks on my (changed) RDP ports? :)
Hi, Great tutorial, I have a question can i do PPTP Connection using my WAN modem ?
I have tried it able connect but no IP Address is given.
Hi Jasdeep, usually you should be able to do it. If you do not have DHCP on your environment, try to assign static IPs to clients.
Can i use this vpn for mikrotik router?
Hello NLB solutions,
Your video was of great help. But i want to confirm one thing, When i went through other resources of tutorials on configuring VPN , many have mentioned about port forwarding to be done on router. I did not find any such thing mentioned onyour tutorial.
So please confirm if this(Port Forwarding) is to be done or not.
And another doubt is whether or not to change anything on security tab of VPN connection properties. Whether or not to enable the check box saying "Microsoft CHAP version 2"
Hi Akhil, thank you for the support. Yes, you are right I only mentioned the need to open ports on your firewalls/routers in order for your VPN to work, but did not show on how it is done. This information is mentioned in the Tips and Tricks section of the video and in the video description.
great video!
one question, after the client pc has connected to the vpn server, if that server 2012 also has a file server on it..will the client be able to see all the shared folder and access them?
and can i access this remote server by any other OS? or can it only be accessed by a windows client os?
Hi Kratosgamer, thank you for the support.
1. Yes, the client will be able to access the shares even if they are not on the same VPN server, as far as they are part of the same domain/network.
2. Yes, this should be working on other client OS as well. They will need to support the PPTP protocol though.
Would like to have seen the configuration for IPSEC but other than that, it was a good presentation.
Thank you, Gizmo.
Great Explained this topic .....thanks
Thank you for the support Essam!
Very clear and helpful instruction. Thank you!
Great video! I do have one question. How were you able to create your NLB Solutions folder.
i FIGURED IT OUT, DISREGARD :)
Hi Edgar, sorry for the delay. Glad you were able to solve it. Good job!.
NLB Solutions thanks again! I ordered a new modem in order to do the port forwrding. just in case it messes up I can put the other one back. when I have some free time I will be checking out more of your videos. stay well!
hi i have a question im a student in it course and i have a problem with the remote desktop, i try to connect from my windows 10 to my server and it says i have an connected sessoin already but there is no sessoins connected. i have done many thigs but they just dont work. we saw that my first network card does not want to connect and when we tried with my wan card with the school ip it worked can you help me please
I have a Question. I Want to connect external computers to my Windows 2012 server, I have CisCo router where I have Server. Can someone please follow up me with what steps I need to carry out?
Very very very good. liked it 👍👍👍👍
Thank you. This tutorial is very helpful..
Thank you for the support, Ananda!
Thanks a lot :) please add some more video on Performance monitor Alerts and trace logs
A Very Good demonstration for a learner, but had a question.
Can this VPN service replace the existing VPN solutions in the market, like what we use now to connect to our office network from home. If yes, how secure is this compared the VPN solutions. Please reply
Hi Ramsmallkay,, thank you for the support.
Depending on what solution you are using in your company. There are great 3rd party VPN solutions that are very secure and flexible. Remote access is a great native feature in Windows that can help you achieve the same, but this option is not as secure. I recommend using SSTP, IPSec or IKEVv2 VPN solution.
SSTP in Windows Server 2016 tutorial - ruclips.net/user/edit?o=U&video_id=1xAXqmN9tiU
Thanks for your reply... Got your point now :) :) cheers
No problem, ramsmallkay! Happy I am able to help.
Hello! First just let me say, great video, simple but clear.
I have a question, I want to access my server from outside the local network, will it work using a dynamic dns?
I know i have to open the PPTP port in my router, but is there anything else i have to do?
Hi 4smm, thank you for the support! Now for the work, I assume you mean dynamic IP? Using a dynamic IP address should be fine for non production, test only environments. You just need to keep track of the external IP address that you have. Well you need to open the PPTP port on the router and forward it to the internal IP address of the VPN server.
Thank you so much for the response. I'm talking about a dynamic dns. Like no IP, or dyndns. Instead of configuring the client with the server local ip, I would use something like mynameserver.ddns.net.
Is it possible? In theory I think so, but I'm not a pro :P
Hi 4smm, this is a thing I haven't tried. But I would love to hear if it is indeed working. You can test it and share your experience!
Thanks for the video! Quick question, I have a client server running Windows 2012R2 with RAS working fine. However I built a new server in a remote location and although it connects and joins a new VPN session to that RAS box nothing happens. It would be good to demonstrate that if you connect to a RAS in which there is no local DHCP server at that end - how does your connection at your end work? I am trying to join this remote server to the Domain in which the RAS server resides but its only getting an APIPA address. I assume I need to go into the VPN advanced settings within IPv4 and set a static. ? :) staceman
Hello Staceman, yes you are right. You can assign a static pool of IP addresses, and they will be given upon connecting to the RRAS server. Good luck !
Hello! I'm new to VPN. Do I have to modify something on my router? I have seen many tutorials and I can not make it work. (Sorry for my bad English).
Hi Jesus, you would need to configure Port Forwarding from the external IP to the internal IP (VPN server) on port 1723.
i had wanted to know how would i find out what my internet address would be when wanting to connect the client machine to the VPN
Great video, thanks for making it!
Thank you, Valiant.
You guys will get there soon. Just keep practicing I'll see you guys at the finish line
Thanks, you have a nice English pronunciation
Dear,
Can u tell me how many users can connect simultaneously with my VPN at same time.?
Hi, i would like to know if the VPN server can be same DC ? and how do i configure two network interfaces one for internal and other for wan ? if i can get a video link it will be great.. Thanks
Can we join my frnds windows 10 client pc which on different network of different locations to my domain controller server pc which is on my local network
Thank you so much sir
I follow your procedure but I am getting "The PPP Link Protocol Was Terminated on Windows 10" and can not see the warning on the event viewer. Please, let me know how to solve it.
Thank you for the great tutorial.
I want to apply this solution out of LAN (via Internet), what do I have to do, in addition to redirecting port 1723 from the fixed and explicit IP address of the router on the local IP server? I needed UNC access via VPN. Thanks!
The answer of this question also interests me; please sir if you had an answer let me know. thank you so much
thank you very much for this demonstation
Thank you for your support, Lahcen!
Thanks man for the great demonstration. But what if my server was not joined with any domain and I want to make VPN connection from my home using Windows 10? I mean, I rent a virtual server somewhere in the internet and I need to use it as a personal VPN.
Hi Fahad, although I have not tried this you should be able to configure it. Most of the settings like accounts and IP addresses for the VPN can be configured on the server. If you are going to do it, I would be more than thankful if you share the experience. Thank you for the support!
Very good video but i would like to hear more about how secure is the vpn and what are the encryption options.
Perfect éducation. Thx.
Thanks for taking the time to do this! Good video (:
Thank you for the support LA!
Thanks. Are you ever going to create a video showing how a client can access the server from outside the network? Say from the internet?
Would you be able to show us how to open ports on our router so clients can remote in from outside our network, not just local.
How did you configure you Active Directory
Error 800: The remote connection was not made because the attempted VPN tunnels failed. The VPN server might be unreachable. If this connection is attempting to use L2TP/IPsec tunnel, the securityparameters required for IPsec negotiation might not be configured properly. Any suggestions??
Does this work with Dynamic or static ip?
Hi there,
does the client OS must be WIN PRO in order to work with VPN through domain credentials access? Or it's working on WIN HOME also?
Nice video, thank you for upload!
Hi Madvih, good question - props. As for the Win Home edition you should be able to connect it via VPN, but I think there are multiple limitations, that will make the experience, lets say a bit difficult as Home editions are not domain joinable.
Hi
I’ve created a vpn on my server. My client is connected but when I try to ping IP server I don’t find it.
Can you help me?
worked like a charm , thank you
Hi
Great video.
are there any requirements for certificates ?
First, thank you Prashant. If I understand correctly, both internal and external certificates can be used for secure VPNs.
Hi if you already have a DHCP server and you specific the range of static ip addresses , will it cause a conflict with the DHCP?
no , I have this scenario and it worked fine
Hi...Can i configure it without a public ip address? just for a test at home...Thanks
Very helpful tutorial. But didn't have how Jessie's account was created. Good video though.
merci très bonne vidéo, très bien expliquer même si je ne comprends pas bien anglais lol
Thanks for the tutorial
Thanks, It's a nice demostration..
Pretty clear.Thks a lot .
hi thakyou for this video i manage to create VPN from our local network. but i want to access VPN outside my network then connect it through VPN . i have already set a port foward on my WAN but no luck. any ideo i got 800 error during connecting. thankyou!
Hi john, this article is very detailed on VPN errors and should help you look into the right direction - blogs.technet.microsoft.com/rrasblog/2009/08/12/troubleshooting-common-vpn-related-errors/
Perfect and precise 👍👍
i cant find active directory users and computers please help
merci beaucoup pour cette video ,vous avez bien explique ,j m suis meme abonnee
Very helpful one
You could make a basic template to start with every ti you start a new .
how to connect mac with this server
And what if I want to connect from other network than local one as it works only when I am connected to my local network.
Hi Pawel, you will need to configure your firewall/router to forward the traffic to your VPN server and you will be able to connect from other networks.
Thanks, so do i need to use the IP lets say 192.168.xxx.16 (IPv4 from remote access role) as my server ip address on my router?
Pawel, you will need to forward the VPN traffic (if you are using PPTP it should be port 1723) to your internal IP on your VPN server.
Thanks for the video, I guess Hendrik dose not know what he is talking about since I did not know how to configure a VPN.
Thank you for the support 3Bs.rocks, much appreciated!
most helpful tutorial
Thanks man for your effort and help. Could you make a video or just explain here how can restrict users to open web sites if in my server 2012 r2 missing group internet explorer maintenance?
Realy good, thanks. Congratulations
Hello Pedro, thank you for your support!
Thank you very much for this tutorial
any idea about software UTM
Dont we have to obtain a static IP address from our ISP first before we can remote into our server from outside our home. I was told the Ip address s has to be set static in order to remote into out network...Nice video
Hi MLS, yes and no. Although using a static IP address can help you to have a single IP to connect to you can use your dynamic IP but you need to know it first and it will change a lot. Dynamic DNS should be implemented for a dynamic IP.
Im referring to remoting in from the outside world. I am not referring to being within your network and remoting in to a local with your a local 192,etc..ip.
Hi MLS, me too :)
My server says it needs resources when i install the role.. all the resources that i have i tried.. but nothing worked.. can you help me out with this one please?
Hi Thomas, what is the exact error that you receive ?
Can you share, how to bring ras vpn in to nlb cluster, i have to give solution for three node in to nlb that include one in dr
Hi subramani, should not be that difficult to implement use the following guide from MS - blogs.technet.microsoft.com/rrasblog/2009/07/02/how-to-configure-network-load-balancing-nlb-based-cluster-of-vpn-servers/
Good job, thanks for this helpful video, solved my problem in 10 minutes
Thank you for the support!
hi,
can you please confirm whether the IP 192.168.142.26 is Jessie's system's internet IP ? coz i am a bit unclear as to when you double click on the Work VPN you enter Jessie's domain credentials to login to VPN, how it allowed jessie to log into VPN server without specifying the domain name during login
+vishal desai 192.168.142.26 is the internal IP address of my VPN server. This is a lab environment and I used my internal network to test if the VPN connection. In real life scenarios instead of using the internal IP the client will have to use external IP or hostname to connect. When you connect with VPN you can use the username without domain specified (if you have issues with authentication, you can try with domain\username).
Hi, Excellent tutorial but could you please explain the IP address of the card on the server. The local and the external card and which one get the gateway and which one doesn't? Thank you
hows it going
VPN can connect but can't ping the server?how to fix? thanks
Thanks man for the great video. How can I do file sharing after I've configured VPN connection? Thank you in advance
Thank you, Phillip! You can share the folders that you want to be accessible and provide the according permissions on them.
very helpful, thanks
Thanks, Great video. cheers.
EXCELLENT!!!!!!!!
Thank you, ThePrelude! Much appreciated!
s. Thank you In The setup❤️
Thank you for this!
No problem thank you for the support !
very good video thanks !!!!!!!!!!!!!!!!!
Great Video!
I have issue with configuration of VPN on Windows server 2016. Its shows below error
The Routing and Remote Access service terminated with the following service-specific error:
A device attached to the system is not functioning.
Event ID : 7024
Source : Service Control Manager.
Can you please provide me solution for this?
Very nice!
very good
Thank you!
thank you good sir