How To Setup your Windows 7 VPN Client to use at Hotspots Everywhere

We now have to configure our client as an outgoing VPN connection:

Click on Start > in the search bar type VPN and then select Set up a virtual private network (VPN) connection.

In my book we set up an SSH server; we learned that most ISP's assign a DHCP IP address to our cable modem.  This means that this IP address can shift from time to time.  Therefore, I showed you how to set up your router to use http://dyn.com to set up a domain name and automatically update your router whenever your IP address changes.  This used to be a free service but now you will have to pay a nominal cost to maintain a domain name that will always keep you pointed at your local network.  We did this so that whenever we are at some other place in the world our shifting IP address never prevents us from connecting to our network.

In the Create a VPN connection dialog enter your Internet address: that can be a domain name or the IP address of the router or server to which you want to connect (e.g. yourdomainname.dyndns.org).  If you're connecting to a work network, your IT department will provide you the address, username and password to use.

The Destination name: field is how you have to identify the connection so it can be resolved on your local network.  The destination name is your VPN server computer name that you made note of while setting it up.  The default, which is "VPN Connection", must be overridden with your VPN server's hostname.

At the bottom are three options from which you are to choose.  Check Use a smart card if you are using one > if this is your laptop or you share it with others check Allow other people to use this connection > if you want to set up the connection, but not connect, select Don't connect now;… otherwise, leave it blank, Next.  I recommend that you never select Don't connect now, as you will have to go back, experiment and reconfigure everything if it does not work the first time you try to connect.

On the next screen, you can either put in your username and password or leave it blank. You'll be prompted for it again when you establish the actual connection.  For convenience, enter both and check Remember this password.  If your Internet device is ever lost or stolen you can easily and quickly delete the server VPN connection information.  Click on the Connect button at the bottom and the Connecting to VPN server name… screen will appear.  If you are successful you should see the You are connected message which means you have a working VPN connection.

To connect, click on the Windows network logo on the lower right part of your screen, then select Connect under VPN Connection.

In the Connect VPN Connection box, enter the appropriate domain and your login credentials, and then click on the Connect button.

To delete your client VPN connection:

1. Bring up the Network and Sharing Center.
2. Click on the Change adapter settings link on the left pane.
3. You will then see the adapters and the VPN connection, right-click on the VPN connection and select Delete.

To use your laptop remotely at a hotspots in the future, click on the network icon on the lower right of the task bar and pick the client VPN Connection that we just configured > click on the Connect information and enter your username and password.

Disabling your VPN Connection when it is not in use

When you are not on the road and just using your local network, you should disable your VPN connection.  You can do this by telling your router not to forward incoming connections to your Windows VPN server or by deleting the connection from your VPN server.  To delete the connection right click on the Start button > in the Search box type Network and Sharing and click on Network and Sharing Center or right click on the desktop Network icon and arrow down to select Properties > on the left, click on Change adapter settings > right click on the Incoming Connections network connection and arrow down to select Delete, Yes.

The other option is to disable the connection in your router by logging in and clicking on the Advanced tab at the top > click on Advanced Setup > arrow down to select Port Forwarding / Port Triggering and delete the VPN-PPTP port 1723 service forwarded to your VPN server.

Troubleshooting your Windows VPN Connection Setup

You will find the procedure and steps above detailed at Microsoft, as well as at many websites and blogs.  I often wonder if these authors actually get their VPN connections working or just say that they do.  After following the detailed steps above, unfortunately for me, when I attempted to connect to my VPN server I received the following message:

The "Connection failed with error 800" message indicates that your connection is unable to reach the VPN server behind your router and/or software firewalls so you have to start eliminating the usual suspects.  First try disabling the Windows firewall on your VPN server by clicking on Start > Control Panel > select the Windows Firewall icon > on the left click on the Turn Windows Firewall on or off and disable your Windows Firewall.

If that does not work, make note of your cable modem IP address and try taking your router out of the loop.  Hook your cable modem directly to the local VPN server and travel to a nearby hotspot to try to connect to your VPN server via your cable modem's IP address.

Try to connect multiple times so that if your VPN server is rejecting your connection it will be reflected in its event logs, this will provide irrefutable evidence that your remote connection never made it to your VPN server.  Log in and view the VPN server event logs by clicking on Control Panel > select Administrative Tools > select Event Viewer > under Windows Logs click on System and examine your errors & warnings.  If, for some reason, you do not see any messages indicating that your Windows VPN server rejected a connection for some reason you will have to look elsewhere for the problem.  In my case, when trying to establish a VPN connection from my client laptop it was:

Connecting to domainname using 'WAN Miniport SSTP'…
Connecting to domainname using 'WAN Miniport PPTP'…

After viewing the VPN server event logs it was obvious that the VPN client connection never even made it to the server, so what to try next?  Bypass your cable modem and router and just try connecting to your VPN server using its local network IP address (e.g. 192.168.1.x).  Hopefully, this will solve your problem or at the very least you will get yourself one step closer to getting a working VPN to use at hotspots.  In my case I got the following error message on my VPN client:

"Error 720: A connection to the remote computer could not be established.  You might need to change the network settings for this connection."

I looked at the VPN server event logs and at last found an error message at last indicating that it was rejecting the connection, "CoId={CB8A5A38-787F-4EEF-A931-D0232ADB8A21}: The user asuscrosshairv\User connected to port VPN3-1 has been disconnected because no network protocols were successfully negotiated."  When scouring the Internet for a solution, I found the answer at http://www.chicagotech.net/VPN/error720b.htm, which described this as a weird problem that may arise due to a Protocol issue on the remote computer.  This explanation is not very scientific but to establish a VPN connection I had to perform the following steps on the VPN server, right click on the Network icon on the desktop arrow down to select Properties, which will open up the Network and Sharing Center > on the left menu click on Change adapter settings > right click on Incoming connections TBD… > click on the Networking tab at the top > double click on Internet protocol version 4 (TCP/IPv4) >tick Specify IP address and type the IP range values that includes your remote device local network and later your cable modem IP address from your ISP, OK.

After performing these steps, I at last had a VPN connection at last via my local area network.  The next step is to change the Internet protocol version 4 (TCP/IPv4) IP addresses to the address range of your cable modem and attempt to connect from a hotspot.

Web pages I looked at to research and put together this blog entry:

http://lifehacker.com/5900969/build-your-own-vpn-to-pimp-out-your-gaming-streaming-remote-access-and-oh-yeah-security
http://www.howtogeek.com/135996/how-to-create-a-vpn-server-on-your-windows-computer-without-installing-any-software/
http://power-byte.wonderhowto.com/how-to/mastering-security-part-2-create-home-vpn-tunnel-0130261/
http://www.pcworld.com/article/2030763/how-and-why-to-set-up-a-vpn-today.html
http://technet.microsoft.com/en-us/library/cc733803%28v=ws.10%29.aspx