RAS

CONNECTING REMOTE PCs/NETWORKS OVER INTERNET

Remote PCs, which are far away from each other, can be connected using Internet. It is cheap to connect Remote PCs using Internet as compared to using phone lines. The Microsoft-designed protocol PPTP (point-to-point tunneling protocol) is used to create connection between computers using Internet .When PPTP is used the protocol MPPE (Microsoft point-to-point encryption) is used to encrypt the data transmission over the Internet so that data be transmitted securely.



The connection created over Internet is called VPN (virtual private network connection) connection or 'VPN tunnel’. Internet is a public network and we are using Internet Infrastructure to build our own private network and hence the private network so created is called virtual private network (VPN).
Industry-standard protocol L2TP (Layer 2 tunneling protocol) is also used to create VPN connections. When L2TP is used, the protocol IPSec (IP Security) is used to encrypt the data transmission. For Authentication, usual authentication protocols like MS-CHAP, EAP etc. are used.
The Remote PC to be connected over Internet must be given a registered ip address or live/real/public address.



PRACTICAL

1. Suppose we have two computers - one in Chd and the other is in Ldh.
2. We want to connect these two remote PCs over Internet.
3. Both the PCs have Win XP prof. installed and both are connected to the Internet.
4. We want to access Ldh PC from the Chd PC.
5. So give a registered ip address to the Ldh PC.
6. Go to Ldh PC, right-click on 'My Network Places' > properties > Create a new connection.
7. Click next and select 'set up an advanced connection'.
8. Click next and select 'accept incoming connections'.
9. Click next > select 'allow virtual ...........'.
10. Click next and select users who will have permission to access this PC remotely.
11. Click next > next > finish.
12. Now go to the Chd PC, right-click on 'My Network Places' > properties > create a new connection.
13. Click next > select 'connect to the network at.............'.
14. Click next and select 'virtual private...........’
15. Click next and in the company name, type Ldh PC.
16. Click next and type the registered ip address of the Ldh PC > next.
17. Click Finish.
18. Enter username and password to connect to Ldh PC.
19. When you are connected, type the name of Ldh PC in the RUN to access the shared folders of the Ldh PC.

\\name of Ldh PC

e.g.,

\\pc2








VPN SERVER

In a company, VPN server can be used so that many remote users can connect to the company network remotely over the Internet at the same time. The VPN server must be given a registered ip address. It can be accessed over Internet from anywhere in the world.




PRACTICAL

1. Go to 2003 server computer and install two NIC cards as shown in the diagram. One NIC card will connect to the Internet and the other to the company private network.
2. Server will have high-speed Internet connection and a registered ip address.
3. Open Programs > administrative tools > Routing and Remote Access.
4. Right-click on computer-name > Configure and Enable Routing and Remote Access.
5. Click next and select 'remote access' > next.
6. Select VPN > next.
7. Select the NIC card connected to the Internet and click next.
8. Select 'automatically' > next.
9. Select No > next > finish.
10. To make the server as 'Router’, right-click on computer-name > properties > select 'router'.
11. Now go to computer management or Active Directory, create users and right-click on a user > properties > dial-in > allow access > so that user has permission to access the VPN server remotely.
12. Go to clients and just create outgoing VPN connection (as we have created in the Chd PC in the previous example).