Post date: Jul 4, 2011 2:13:30 PM
On the client end, the settings required are:
MS-CHAP v2 authentication Require encrypted connection - disconnect if none Server host name / address is: vpnhost. Compression off
Note the full stop / period mark at the end of vpnhost - this is important for it to work on all platforms.
The username and password are those from the username/password of the realm user.
This has been successfully tested with Windows 2000, Windows XP and Mac OS X, reports are welcomed from other platforms.
Step-by-step instructions...
First, do some checks:-
your WIANA realm is setup with one or more user accounts with "Vpn" class
your WIANA node management page is setup to allow only realm authorised logins
Captive Portal = capture ON
Portal Mode = Auth Only
Portal Style = Wiana based
Radius only Local = YES
Lock to realm prefix = name_of_your_realm
Click "make changes" and wait for the node to check in and load the new settings, after that it will use the realm login details on the fly.
Mac OS X
Connect using Internet Connect. Under File you will see the option New VPN Connection Window. Under Server Host put in "vpnhost." Under username and password put in the username and password created under your realm for VPN clients. Click connect.
Windows XP
START -> Connect To -> Show all connections
File -> New Connection
click Next
select "Connect to the network at my workplace" -> click Next
select "Virtual Private Network Conenction" -> click Next
enter a suitable Connection Name (eg. "Mesh VPN") -> click Next
select "Do not dial the initial connection" -> click Next
enter the Host Name "vpnhost." (yes, including the final full stop but without the quotes) -> click Next
click Finish
next you should make some simple changes to help protect you from the Internet...
click Properties
click tab Networking
deselect "File and Printer Sharing for Microsoft Networks"
deselect "Client for Microsoft Networks"
click tab Advanced
select "Protect my computer and network..." (Internet Connection Firewall)
click OK
finally, you can start your new VPN connection...
enter the User Name and Password for the "Vpn" class account you set up in your realm earlier
if you want to make your life easier, click "Save this user name..."
click Connect
et voila!
For the ultimate in laziness, you can even set Internet Explorer to automatically start the VPN connection whenever it is needed...
In Internet Explorer...
Tools -> Internet Options...
click tab Connections
select "Always dial my default connection"
in the list, select the VPN connection you have just created then click "Set Default"
click OK