4Enable PPTP (Point to Point Tunneling Protocol) if employees will need to access the intranet from Windows workstations other than Windows XP computers or from Mac OS X version 10.2 computers when they are away from the office. If you need to support older Windows clients that don’t have
To restrict VPN connections to members of a group, select “Restrict access to group” and select the group. Click the Users & Groups button to open a drawer from which you can drag a group name into the field.
Enter a starting and ending IP address to indicate which addresses the VPN server can assign to clients. Avoid addresses the DHCP server is set up to serve. Also avoid addresses you specified when you enabled L2TP over IPSec.
5Click Save, then click Start Service.
Step 8: Set up productivity services
The infrastructure you need to set up file, print, and other productivity services is now available. Follow the instructions in the relevant administration guides, listed on page 9, to configure the services of interest. Many services, such as Apple file service, require minimal
Step 9: Create user accounts and home directories
1Open Workgroup Manager. The Open Directory master LDAP directory is automatically available for editing. You’ll add an account for each employee to this master directory.
2Click the New User button.
3Specify user settings in the panes that appear.
The user management guide tells you how to set up all the user account attributes, including home directories. It also describes how to manage users by setting up group and computer accounts and how to set up preference settings that customize the work environments of Macintosh clients.
The Windows administration guide focuses on how to implement support specifically for Windows workstation users. Use this document to supplement the user management guide and the Open Directory administration guide if your server will support Windows users.
Appendix B Setup Example
125
