how do I set up a vpn ??????

[Siggy]

Hi guys - i have my first corporate customer and they have asked me to set up a vpn for one of their staff that will be working from home.
I have tried following a lot of the instructions from the microsoft site and am lucky i still own my business - I was afraid of the compensation claim! They are lawyers!

OK:route from office to home worker
Windows 2000 advanced server,
Netgear Router
ADSL Modem
Internet
ADSL Modem
Windows XP

Windows XP end is fairly straightforward (except i am not sure which IP address to put in for the VPN to connect to server- but I can do trial and error)

On the Server end I cant find Internet security and Acceleration server - so most of the walkthroughs I have found become redundant.
I went into Remote Access and set up as well as I could
I had to upgrade the router firmware because the version they had has problems with VPN and PPtP
I lost all internet access for company
I removed the Remote Access and the server is now working again

They are back to where they were before I went in - (except the router is upgraded)

I am no further forward in setting up the VPN


My Question is this:

What is the easiest way to set up a VPN in this situation - Do I stick with trying to make it work with what they have - or should i be buying new software or hardware to make this work

Please make answers easy to follow as i am totally brain dead

Siggy

PS - If you guys come up with the answer (that I can follow and implement) I will add a donation to the computer parts fund!!

[kryyst]

In Routing and Remote Access you need to create a server (if there isn't one).

In Routing Interface You need the following

Lan Interface Type
Loopback Loopback
Local Area Dedicated
Internal Internal


Ip Routing (general tab)

Interface Type IP Adress
Loopback Loopback 127.0.0.1
Local Area Dedicated (ip of the nic)
Internal Internal usually N/A


Static Routes empty
Remote Access Policy : Allow Access if dial-in permission enabled
Then in the user administration for that user turn on dial-in permission to allow
You also need the Routing and Remote Access service running

Then on the client side have the user try to connect to the external IP of the router and it should pass through to the internal network for authentication if you have your forwarding set-up correctly.

However I may be missing a step here since it's been awhile since I've had to do it. Normally I just work with cisco routers.