(Answer) (Category) MSO Technologies FAQ : (Category) Using MSO resources : (Category) Network help :
Setting up a VPN to MSO.
Service pack 2 contains the L2TP/IPSec NAT-T update, however, it is known to break some industrial control applications. If this is true for you, apply only the L2TP/IPSec NAT-T update instead.

Before you begin, make sure you meet the following requirements.

Windows XP Professional or Home Edition

 IPSec.exe http://www.msotech.com/pub/ipsec/ipsec-wxp-2.2.0.exe.
 Service Pack 2 (or the L2TP/IPSec NAT-T update)
    http://www.msotech.com/pub/ipsec/818043/WindowsXP-KB818043-x86-ENU.exe.
 Your configuration file.
 Your certificate file.
 Your export password.

Windows 2000 Professional

 Windows 2000 service pack 3 or above.
 IPSec.exe http://www.msotech.com/pub/ipsec/ipsec-w2k-2.2.0.exe.
 L2TP/IPSec NAT-T update
    http://www.msotech.com/pub/ipsec/818043/Q818043_W2K_SP5_x86_EN.EXE.
 Your configuration file.
 Your certificate file.
 Your export password.

You will have been sent the configuration file, certificate file and export password.

1) Install required software.

 1.1) Install IPsec.exe to c:\Program Files\IPSec.
 1.2) Copy your configuration file and certificate
      to c:\Program Files\IPSec.

2) Add your certificate. While Windows does recognize certificate files, DO NOT DOUBLE-CLICK this file. Always use the MMC to import certificates.

 2.1) Start the MMC by double-clicking 'c:\Program Files\ipsec\IPSec.msc'.
 2.2) Right-click 'Personal', click 'All Tasks', then 'Import'.
 2.3) Click 'Next'.
 2.4) Type in the path to your certificate
      'c:\Program Files\ipsec\[your name].p12'
      (or browse and select the file), and click 'Next'.
 2.5) Type the export password you were given and click 'Next'.
 2.6) Select 'Automatically select the certificate store based on the
      type of certificate', and click 'Next'. DO NOT SELECT 'Place all
      certificates in the following store'.
 2.7) Click 'Finish', and say yes to any prompts that pop up.
 2.8) Exit the MMC. Should a 'save this file' dialog show up,
      it is not necessary to save.

3) Create a VPN

 3.1) Connect to the Internet. This may be a dial-up, broadband or LAN.
      It cannot be the MSO internal LANs in Thousand Oaks or Irvine.
 3.2) Run the 'IPSec VPN' shortcut.

You can now search for one or more servers by IP address, do not search by name.

4) To turn off the VPN

 4.1) Open a command prompt.
 4.2) Change to c:\program files\ipsec
 4.3) Run "ipsec -off"
 4.4) Run "ipsec -delete"

address-suppressed
[Append to This Answer]
Previous: (Answer) The treatment of email viruses.
Next: (Answer) Sychronizing with company time servers.
This document is: http://www.msotech.com/cgi-bin/fom?file=8
[Search] [Appearance]
This is a Faq-O-Matic 2.721.
This FAQ administered by ...