connectionvista换xp

ConfiguringWindowsXP/VistaL2TPclient&ZeroshellBasics:BootfromzeroshellCDthenlogintoyourzeroshellbox.
Withthedefaultimage/configsitisreadytoacceptL2TPconnectionsbysimplyenablingthecheckboxinthe/NETWORK/VPN/Host-to-LAN(L2TP/IPSEC)GUImenuandUSERS/RADIUSenable.
Watchfortheradiuswarning.
Zeroshellisreadynowit'stimetosetuptheclients.
The"admin"accountonzeroshelliscreatedbydefaultwe'lljustusethatonefordemonstrationpurpose.
NowyouwanttocreateahostfilecertificateforeachcomputerthatwillbeaccessingyourL2TPvpnserver(i.
e.
zeroshellbox).
ClickonNETWORK/Hosts/AddNowselectyouruser"admin"accountUSERS/Users/ViewandmakesureL2TPischeckedsothatthisuserisallowedtoconnect.
That'sallwithzeroshell.
NowmoveontoyourclientsPC.
InyourwindowsXPcomputer"Createanewconnection"fromControlPanel/NetworkConnections.
InwindowsVista"Setupaconnectionornetwork"fromControlPanel/NetworkandInternet/Connecttoanetwork.
ScreenshotsofwindowsXPbelowThat'stheendofthebasics.
ScreenshotsofVistaareessentiallythesamesoI'mnotgoingtoputthemhere.
Preparation–DownloadallyourcertificatesfromthemachineyouwillbeconnectingtheL2TPsessionorplacethemonathumbnail/jumpdrive.
YouwillneedthehostcertificatethatyoucreatedearlieronzeroshellforyourcomputerandalsothezeroshellCAorrootCertificateofAuthority.
Gotoyourzeroshellloginscreentogetthecertificatesyouneed.
Youcanclickon"CA"todownloadtherootcertificateandthen"Hosts"togetyourcertificateforyourcomputer.
Youdon'tneedtobeloggedontothezeroshellbox,infactit'sbetterthatyou'renotloggedon.
FortherootCAitisimportant(onwindowsmachines)toexportthecertificatewiththe*.
DERfileextensionandNOTTHE*.
PEMfile.
Nowunder"Hosts"chooseyourhostcertificateandexportthePKCS#12(PFX)file.
Advanced:TocompletethefollowingyoushouldbeloggedonanAdministratoraccountonyourclientPC.
IwillassumeyoudideverythingcorrectwiththezeroshellCAandexportedyourhostcertificate(pkcs#12,derorpemfiletoyourremotecomputer,examplehostname.
pfx)andnowyouwanttoconfigurewindowsXPorVistacomputer.
Note:Forthecertificatestorewindowswilleitherdefaulttouseoption"Automaticallyselectthecertificatestorebasedonthetypeofcertifcate"or"Placeallcertificatesinthefollowingstore".
We'retalkingaboutwindowsheresoifthatoptionsdoesn'timportthecertificatewellusetheotheroption.
Theobjectistogetthecertificateimportedintothecorrectstore.
_______Part1of4_______LogonanAdministratorAccountandusetheRun.
Type"MMC"andwhentheconsoleopensclick,File-Add/RemoveSnap-in.
ClickAdd-Certificates-Add-"ComputerAccount"ClickNext-LocalComputer-FinishOnceagain,ClickAdd-Certificates-Add-"ServiceAccount"ClickNext-LocalComputer-Next-IPSECServices-FinishNowClickOK,Expand"Certificates(LocalComputer)"RightClickPersonal-AllTasks-Import.
.
.
-"hostname.
pfx"-Next-Next-AutomaticallySelectCertificateStore-Next-FinishExpand"Certificates(LocalComputer)"-Personal-CertificatesNowyoushouldseeyour"hostname"_______Part2of4_______NowClickOK,Expand"Certificates-Service(IPSECServices)onLocalComputer"RightClickPolicyAgent\Personal-AllTasks-Import.
.
.
-"hostname.
pfx"-Next-Next-AutomaticallySelectCertificateStore-Next-FinishExpand"Certificates-Service(IPSECServices)onLocalComputer"-PolicyAgent\Personal-CertificatesNowyoushouldseeyour"hostname"_______Part3of4_______LastdetailyouneedtoimportistheTrustedRootCertificationAuthoritiesoryour"ZeroshellCA".
Easymethodisto:ExportthederorpemfilefromyourZeroshellCAtoyourcomputer(Zeroshell_CA.
der)Expand"Certificates(LocalComputer)"RightClickTrustedRootCertificationAuthorities-Certificates-AllTasks-Import.
.
.
-"Zeroshell_CA.
der"-Next-Next-Placeallcertificatesinthefollowingstore-TrustedRootCertificationAuthorities-Next-FinishNowExpand"Certificates(LocalComputer)"-TrustedRootCertificationAuthorities-CertificatesNowyoushouldseeyour"Zeroshell_CA"_______Part4of4_______Review:Youshouldseethehostnameofyourcomputerin2places,Certificates(LocalComputer)-Personal-Certificates&Certificates-Service(IPSECServices)onLocalComputer-PolicyAgent\Personal-CertificatesYoushouldseetheZeroshell_CAin2placesCertificates(LocalComputer)-TrustedRootCertificationAuthorities-Certificates&Certificates-Service(IPSECServices)onLocalComputer-PolicyAgent\TrustedRootCertificationAuthorities-CertificatesNote:WhenyouaddtheZeroshell_CAtotheCertificates(LocalComputer)itgetsaddedbydefaulttoCertificates-Service(IPSECServices)butifitdoesn'tyouneedtomanuallyadditlikewedidwiththeotherones.
WhenIsaymanuallyImeaninsteadoflettingthecertificatestoreautomaticallygetselectedinsteadimportitdirectlytothecorrectcertificatestoreanduse"Placeallcertificatesinthefollowingstore"optionorthedefaultwindowsselects.
Note:AftercompletingthesestepsyoucanCreateavpnconnectoidforWindowsVista&WindowsXPwiththedefaultsettings.
IntheNetworkingtabyoushouldselectL2TPIPSecVPN.
UnderSecurityuseTypical(recommendedsettings)withcheckboxRequiredataencryption(disconnectifnone).
Note:Hostsshouldhavesamedomainasthezeroshellboxunlessyouknowwhatyou'redoingwithKerberos5domain/realmtrustrelationships.
Clickthevpnshortcutwecreatedearlier.
TheEndCreatedbyvpn_rollercoaster