Microsoft manual ISA Server 2004 Configuration Guide 257

Create the VPN Gateway Dial-in Account at the Main Office

We must create a user account that the main office VPN gateway can authenticate when it initiates the VPN site-to-site connection. The user account must have the same name as the demand-dial interface created on the branch office machine.

Perform the following steps to create the account the remote ISA Server 2004 firewall will use to connect to the main office VPN gateway:

1.Right click My Computer on the desktop and click Manage.

2.In the Computer Management console, expand the Local Users and Groups node. Right click the Users node and click New User.

3.In the New User dialog box, enter the name of the main office demand-dial interface. In our current example, the demand-dial interface is Main. Enter Main into the text box. Enter a Password and confirm the Password. Make a record of the password because you’ll need to use it when you configure the remote ISA Server 2004 VPN gateway machine. Remove the checkmark from the User must change password at next logon check box. Place checkmarks in the User cannot change password and Password never expires check boxes. Click Create.

4.Click Close in the New User dialog box.

5.Double click Main user in the right Pane of the console.

6.In the Main Properties dialog box, click the Dial-intab. Select Allow access. Click Apply and OK.

ISA Server 2004 Configuration Guide 257