Create the VPN Gateway Dial-in Account at the Main Office
A user account must be created on the main office firewall that the branch office firewall can authenticate when it creates the site-to-site connection. This user account must have the same name as the demand-dial interface on the main office computer. You will later configure the branch office ISA Server 2004 to use this account when it dials the VPN site-to-site link.
To create the account the remote ISA Server 2004 firewall will use to connect to the main office VPN gateway:
1.Right click My Computer on the desktop and click Manage.
2.In the Computer Management console, expand the Local Users and Groups node. Right click the Users node and click New User.
3.In the New User dialog box, enter the name of the main office demand-dial interface. In our current example, the demand-dial interface is Branch. Enter Branch into the text box. Enter a Password and confirm the Password. Make a record of the password because you’ll need to use it when you configure the remote ISA Server 2004 VPN gateway machine. Remove the checkmark from the User must change password at next logon check box. Place checkmarks in the User cannot change password and Password never expires check boxes. Click Create.
4.Click Close in the New User dialog box.
5.Double click the Branch user in the right Pane of the console.
6.In the Branch Properties dialog box, click the Dial-intab. Select Allow access. Click Apply and then click OK.
ISA Server 2004 Configuration Guide | 250 |
