Making a VPN connection to the IU network in Windows 2000 using the PPTP protocol
Note: At Indiana University Bloomington and IUPUI, you can now access the wireless network without using VPN. See About IU Secure
On this page:
- Introduction
- Creating a VPN connection
- Configuring your VPN connection
- Establishing a VPN connection
Introduction
This document explains how to manually set up a VPN connection in Windows 2000 at Indiana University Bloomington and IUPUI. UITS recommends that you set up a VPN connection to IU for Windows 2000 by using the VPN Installers, available from the IUware CD or from IUware Online at:
http://iuware.iu.edu/list.aspx?id=134This software automatically does what the instructions in this document describe how to do manually.
Before creating a VPN connection, make sure your copy of Windows 2000 is running the latest service pack. To scan your computer and download the service packs and updates you need, visit Microsoft Windows Update at:
http://windowsupdate.microsoft.com/If you are unsure which service pack is currently installed on your computer, see Determining which service packs are installed in Windows For more information on obtaining updates for Windows 2000, see Getting software updates and patches for Windows computers
Note: IU's VPN is intended for individual computing accounts only. Group and departmental accounts cannot access the VPN. See Why can't I make a VPN connection through an IU group or departmental account?
Note: If you are a student, faculty member, or staff member at Indiana University Bloomington or IUPUI, use the IU Secure network for wireless access. For help, see About IU Secure If you are visiting IU, instead see Network Access account basics
Creating a VPN connection
To create a VPN connection to the IU network in Windows 2000, either wirelessly or remotely:
- Right-click
My Network Placesand selectProperties.
- In the
Network and Dial-up Connectionswindow, double-click theMake New Connectionicon to open the Network Connection Wizard. ClickNext.
- Select
Connect to a private network through the Internet, and then clickNext.Note: If the
Connect to a Virtual Private Network through the Internetoption is not available, you may need to enable the Remote Access Connection Manager service. For more information, see If the option to connect to a virtual private network is unavailable in Windows 2000 or XP Professional - If your computer already has a
Dial-Up Networkingicon, at this point you may see the following message:"Windows can automatically dial the initial connection to the Internet or other public network before establishing the virtual connection."
If you don't see the above message, proceed directly to the
Destination Addresswindow (see step 5). If you do see the message, do the following:- In the
Public Networkwindow, you must tell Windows what public network connection you will use to attach to your VPN:
- If you are connected to a persistent Internet
connection (e.g., Ethernet), choose
Do not dial the initial connection. - If you must dial in to connect to the Internet, choose
Automatically dial this initial connectionand select your Internet service provider (ISP) connection.
- If you are connected to a persistent Internet
connection (e.g., Ethernet), choose
- Click
Next.
- In the
- In the
Destination Addresswindow, type the hostname or address of your VPN server and clickNext.Use the table below to find your VPN server for both remote (e.g., cable modem, DSL, or outside Internet service provider) and wireless VPN connections:
Campus VPN server
IU Bloomington pptp.indiana.eduIU East vpn.iue.eduIU Kokomo vpn.iuk.eduIU Northwest 149.162.8.2IUPUI pptp.iupui.eduIU South Bend vpn.iusb.eduIU Southeast vpn.ius.edu - In the
Connection Availabilitywindow, select the option most appropriate for your situation, and then clickNext.Note: If you are using a wireless card and wish to log into a domain (including ADS) upon starting Windows 2000, you must select
For all users. Selecting this option will make the VPN connection available when you chooseLog on using dial-up connectionat the login screen. - On the next screen, type a name for your new connection (e.g.,
IU-VPN). If you want a shortcut icon on your desktop for the new connection, selectAdd a shortcut to my desktop.
- Click
Finishto complete the connection. You now should see your new connection under "Network and Dial-Up Connections".Note: You may be presented with a login screen to get connected to the VPN server instead. You still need to complete the following steps, so do not log in yet. Continue to the following section.
Configuring your VPN connection
To configure your connection for the IU VPN servers:
- If you have proceeded here from the previous steps and see the VPN
login box, click the
Propertiesbutton.If you don't see the login box, locate and select the VPN connection icon, and then right-click and select
Propertiesfrom the menu that appears. - Click the
Optionstab, and selectPrompt for name and password, certificate, etc.andInclude Windows logon domain.
- Click the
Networkingtab. Set "Type of VPN server I am calling:" toAutomatic.
- In the "Components checked are used by this connection" field,
only the following should be checked:
Internet Protocol (TCP/IP)File and Printer Sharing for Microsoft NetworksClient for Microsoft Networks
- Select
TCP/IP, and then clickProperties.
- Select both
Obtain an IP address automaticallyandObtain DNS server address automatically. ClickOK.
- Click the
Securitytab.
- Select
Advanced (custom settings), and then clickSettings.
- Under "Logon Security", select
Allow these protocolsand make sure the only checkbox selected isMicrosoft CHAP Version 2 (MS-CHAP v2). Then clickOK.
Establishing a VPN connection
To establish a connection to the VPN server:- Double-click the new connection icon. When prompted, enter your
ADS username and password. In the "Logon domain:" field, enter
ADS. ClickConnect.Note: It may take up to a minute to establish a connection with the VPN server. Please be patient. If you have problems connecting, note any error messages and contact your campus Support Center.
- When the connection is established, you should see a new icon in
the system tray. This icon is identical to the one for dial-up
connections.
- To disconnect and terminate the connection, double-click the icon
in the system tray and choose
Disconnect.

