Creating a Client-To-Site VPN. BT Cloud Compute. The power to build your own cloud solutions to serve your specific business needs.

Transcription

1 Creating a Client-To-Site VPN BT Cloud Compute The power to build your own cloud solutions to serve your specific business needs Issue 2

2 Introduction This guide is intended to demonstrate how easy it is to set up a Client-to-site VPN connection within BT Cloud Compute. It is not intended to be exhaustive and show every variations as the choice of VPN client is very wide and entirely down to you. For the purpose of this guide we will be using a Microsoft Windows 7 laptop as the VPN client device, other Microsoft Windows products should work similarly. Non Microsoft products will vary but will require the same steps in order to create the VPN. Creating a VPN requires a two stage approach. First the VPN needs to be enabled within the Portal then the VPN needs to be configured within the VPN client. Once both stages are complete the VPN can be connected. The following sections will demonstrate how this is achieved. BT Cloud Compute can also support a site-to-site VPN. Please see separate a guide for additional information. British Telecommunications plc. Page 2 Issue 1

3 Pre-requisites In order to create the VPN there are an number of pre-requisites. Firstly you will need to have created an Account within BT Cloud Compute. Within this Account you should have created your virtual machines. In this example we have an Account with 8 subscriptions running. If you need further assistance on creating an Account or creating virtual machines please consult your Account manager or review the BT Cloud Compute User Guide. Secondly you will need to have access to the virtual machines within the Account. If you have just created the virtual machines you naturally have access. However, if an Account had previously been created by someone else you need to ensure you have access to the virtual machines. Within Cloud Compute there are a number of user profiles therefore you need to ensure you have an appropriate profile to see the virtual machines. The Master User (the person who set up the account) manages the users access rights therefore you may need to check with them to see if you have the right access. Thirdly you need a VPN client running on a appropriate device. As already discussed for the purpose of this guide we will be using a Microsoft Windows VPN running on a Microsoft Windows 7 device. Remember the firewall rulesets within the Cloud Portal need to be configured to allow Internet traffic to your virtual machine. There is a separate guide available to help you configure the firewall. British Telecommunications plc. Page 3 Issue 1

4 Enabling VPN in the BT Cloud Compute Portal Log into the Portal. From the Home screen select [Manage Resources], followed by [Cloud]. From the newly presented sub menu select the [IP Addresses] tab. From the left hand menu select the IP Address where you want the VPN to be enabled. Please note that every user within the Account will have their own IP address. They will also have one per Availability Zone they have deployed their virtual machines within. Where multiple IP Addresses exist remember to check the Availability Zone. This is displayed above - [Zone]. British Telecommunications plc. Page 4 Issue 1

5 BT Cloud Compute Creating a Client - to - Site VPN For your chosen IP Address select the [VPN] tab. Initially there will be no VPN enabled so you will be required to select the [Enable VPN] button and then [Confirm] you want it enabled. The Cloud Compute service will now begin the enabling process. Once completed a dialog box similar to the one below will be shown. It should show for the IP Address you have chosen the unique IPSec pre-shared key. For each user you wish to give access create a Username and Password. To add additional users select the [+] button. If you wish to delete any users simple select the [Delete] button. You are now ready to set up a Client-to-site VPN connection on your PC / client device. Make a note of the following as you will need it when creating the VPN in your PC / client device: Public IP Address Internal IP address of a server built in Cloud (to test connectivity) Username / Password created above The pre-shared Key British Telecommunications plc. Page 5 Issue 1

6 Creating a VPN Connection on your PC / device The instructions provided in this section are based on creating a VPN connection on a Microsoft Window 7 PC using the standard provided VPN client. The instructions can be similarly applied to other versions of Microsoft Windows but will vary for other VPN clients. You will first need to open the Network and Sharing Center. To do this go to [Start] > [Control Panel] > [Network and Sharing Center]. Click on [Set up a new connection or network], then select [Connect to a Workplace] followed by [Next]. British Telecommunications plc. Page 6 Issue 1

7 BT Cloud Compute Creating a Client - to - Site VPN When the following dialogue box opens select [No, create a new connection] followed by [Next]. Select [Use my (VPN)]. Internet connection Enter the Public IP Address you noted when enabling the VPN in the Portal and give the [Destination name] something meaning full so you can easily identify it. Now select [Don t connect now, just set it up so I can connect later]. Once complete select [Next]. British Telecommunications plc. Page 7 Issue 1

8 Enter the username and password you created within the Portal. In this example we select to remember for ease of access. Select [Create]. The VPN connection will now be configured and saved on your machine. Select [Close] to complete the operation. British Telecommunications plc. Page 8 Issue 1

9 The VPN configuration is now saved on your PC but it is not usable as you have not configured the IPSec pre-shared key. From you PC s taskbar select your network icon this may be the wireless icon or in this example a network cable. This will open the available network menu. Select the VPN network created earlier and while highlighted click on the right mouse button. This will open the [Connect] / [Properties] options. Select [Properties]. Select the [Security] tab and change [Type of VPN] to [Layer 2 tunnelling Protocol with IPSec (L2TP/ IPSec), now select the [Advanced setting]. Enter the IPSec pre-shred key (noted earlier from the Portal). Followed by [OK] and [OK] again. Your VPN has now been enabled in the Portal and your PC / VPN device configured. British Telecommunications plc. Page 9 Issue 1

10 Connecting using the VPN From you PC s taskbar select your network icon this may be the wireless icon or in this example a network cable. This will open the available network menu. Select the VPN you created earlier followed by [Connect]. Enter the [User name] and [Password] followed by [Connect]. If you checked the {Remember this password] as we showed in the example on Page 9 you will not be required to enter the password. You are now connected. British Telecommunications plc. Page 10 Issue 1