Citrix Systems 4.2 16.24.2. Using Remote Access VPN with Windows

Using Remote Access VPN with Windows
191
• remote.access.vpn.psk.length – Length of the IPSec key.
• remote.access.vpn.user.limit – Maximum number of VPN users per account.
To enable VPN for a particular network:
1. Log in as a user or administrator to the CloudPlatform UI.
2. In the left navigation, click Network.
3. Click the name of the network you want to work with.
4. Click View IP Addresses.
5. Click one of the displayed IP address names.
6. Click the Enable VPN button.
The IPsec key is displayed in a popup window.
16.24.2. Using Remote Access VPN with Windows
The procedure to use VPN varies by Windows version. Generally, the user must edit the VPN
properties and make sure that the default route is not the VPN. The following steps are for Windows
L2TP clients on Windows Vista. The commands should be similar for other Windows versions.
1. Log in to the CloudPlatform UI and click on the source NAT IP for the account. The VPN tab
should display the IPsec preshared key. Make a note of this and the source NAT IP. The UI also
lists one or more users and their passwords. Choose one of these users, or, if none exists, add a
user and password.
2. On the Windows box, go to Control Panel, then select Network and Sharing center. Click Setup a
connection or network.
3. In the next dialog, select No, create a new connection.
4. In the next dialog, select Use my Internet Connection (VPN).
5. In the next dialog, enter the source NAT IP from step 1 and give the connection a name. Check
Don't connect now.
6. In the next dialog, enter the user name and password selected in step 1.
7. Click Create.
8. Go back to the Control Panel and click Network Connections to see the new connection. The
connection is not active yet.
9. Right-click the new connection and select Properties. In the Properties dialog, select the
Networking tab.
10. In Type of VPN, choose L2TP IPsec VPN, then click IPsec settings. Select Use preshared key.
Enter the preshared key from step 1.
11. The connection is ready for activation. Go back to Control Panel -> Network Connections and
double-click the created connection.