1. When a branch office needs to connect to the head office intranet
For branches with a large number of employees, device-based dial-in is recommended. Routing entries forward only the data that is actually needed, which improves office efficiency.
2. For employees working off-site who temporarily use 【the configuration methods for the built-in tunnel client on Windows 10{Item A} and Windows 7 {Item B} described below】
Please first confirm the company’s SSTP access address: (please consult your administrator)
{If SSTP dial-in fails, please try L2TP instead. L2TP/IPsec with a pre-shared key can be used. The pre-shared key is: (please consult your administrator for the actual key) Note that the dial-in address is （please consult your administrator)}
When employees dial in from their personal computers this way, heavy downloads and video streaming are not recommended, so as to reduce the internet load on the head office; if you need to use it on a long-term basis, please use the third method below.
3. For employees who travel frequently or work from home for long periods, refer to the document below {Item C};
Frequent users are advised to install the dedicated client software below. It provides automatic traffic splitting, so that not all traffic is forwarded to the head office and the head office’s internet egress bandwidth is not affected.
Item (A) How to configure a tunnel on Windows 10:
1. Click the “Start” icon in the lower-left corner
2. Click the “Settings” button to open the device menu
3. Click “Network & Internet”
4. Click “VPN”
5. Click “Add a VPN connection”
6. Enter the account and other information as shown in the figure below, then save
7. Select the VPN connection you just created and click “Connect”. When “Connected” is displayed, the VPN dial-in has succeeded.
8. Once connected, all traffic is forwarded to the head office network, so it is advisable to disconnect the VPN when doing heavy downloads or watching videos. (Automatic traffic splitting excepted.)
Item (B) Windows 7 tunnel configuration
First, right-click the network connection icon in the lower-right corner of the desktop, select Network and Sharing Center, and open the Network and Sharing Center window. (You can also right-click the network icon on the desktop and select “Properties”.)
Step 2: As shown in the figure below, select Set up a new connection or network.
Step 3: In the box shown below, select “Connect to a workplace”.
Step 4: Select “Use my Internet connection (VPN)”
Step 5: Enter the VPN server address: (please contact your administrator for the address). As shown in the figure, select “Don’t connect now; just set it up so I can connect later”
Step 6: Enter the account and password provided by Liangdian Network, and tick the box next to “Remember this password”.
Step 7: At this point, the VPN connection has been created successfully. Click “Close”, then modify the connection settings before connecting.
In addition, let us introduce some advanced settings for the VPN connection.
1. Open the VPN connection. As shown in the figure below, click the “Properties” button.
On the General tab, you can change the IP address or domain name of the VPN server.
On the Security tab, you can set data encryption to “Optional encryption” to avoid VPN dial-up errors 741 and 742 caused by an incorrect encryption type.
On the Security tab, you can also set the VPN type. The default is Automatic; you can specify the protocol you want to use, such as PPTP, L2TP or SSTP. SSTP is currently preferred.
Specifying it directly saves the time spent dialing while protocols are rotated automatically.
Once configured, click OK to save the settings.
These are the detailed steps for creating a VPN connection in Windows 7.
Next, create a shortcut on the desktop so it is easier to use later.
1. Open Network and Sharing Center and, as shown in the figure below, click “Change adapter settings” in the navigation pane on the left.
2. In the Network Connections window, find the VPN connection you just created, right-click it and select “Create Shortcut”!
In the shortcut dialog box that appears, select “Yes”.
.
After completing the steps above, a VPN connection shortcut has been successfully created on your desktop. From then on, simply select this VPN on the desktop to connect.
Item (C) Establish a Tunnel Using Client Software
Software download links:
Windows [7, 8.1, 10, 11, 2008R2, 2012R2, 2016, 2019, 2022 – v0.5.3]
https://www.siwenlide.com/wg/wg.zip
macOS v1.0.15
https://itunes.apple.com/us/app/wireguard/id1451685025?ls=1&mt=12 (App Store)
Ubuntu
$ sudo apt install wireguard
- After downloading, install the software, click “Import tunnel(s) from file”, and import the ***.conf file provided by your administrator into the software;
-
- Click “Connect” to start the encrypted dial-up connection; once the connection succeeds, use the ping command to check whether it works ;
