Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We need to get a VPN connection setup with a client. I am mostly a software guy and networking is beyond my scope. We have been provided the peer IP address and the NAT of the local machine we will be hitting on their end. We were also sent a PSK but no other credentials. They might send when we are ready to test I guess.

They provided no specs on their end and we need to accomplish this connection as soon as possible.

What is the best tutorial to get the job done? Is it not as simple as opening the IP on our firewall and creating a new network connection using the VPN option?

share|improve this question
Since you noted that you have a firewall, why not just use the firewall for the VPN instead of Windows? – Dresca Sep 21 '12 at 16:20
I'd also use the firewall so its more accessible around the network. Do you know what firewall model you have? – Robert Sep 25 '12 at 23:09

What type of VPN connection is important to the ports that you need to open on the firewall. Once that's determined you can create the VPN type in the new network option as you describe. If you don't want to worry about the autoconfig - choose "don't connect now" and go to the VPN properties. Under the "Security" tab select the appropriate VPN type (since you said PSK I'm assuming that would be L2TP) and authentication options that were provided. From there you should be able to connect.

For your firewall, and L2TP you'd probably want the following ports open:

  • UDP 4500 (IPSEC NAT-T)
  • UDP 1701 (L2TP traffic)
  • UDP 500 (IKE)

For PPTP the following need opened:

  • TCP 1723
  • IP Protocol 47
share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.