Launch the server. This server does not require the powerful computing resources - you can choose basic instance type like B1ls, B1s, B1ms etc. After launching, this server is immediately fully operational. No server setup required.
Linux username: azureuser
User authentication: certificates + username/password.
Server certificates are automatically generated and installed on the server when instance is launched for the first time or after starting the instance if IP address of the instance has changed. ZIP archive containing client certificates can be downloaded from the User Management Web Panel.
User management Web Panel:
https://[Public IP address].sslip.io
http://[Public IP address]
(Use "administrator" as username and last 12 characters of your Virutal Machine ID (VmId) as password)
WINDOWS-CLIENT SETUP
To set up the VPN client on Windows, you need to perform two main steps:
1. Install client certificates on Windows.
2. Create and configure an IKEv2 VPN connection with Extended Authentication Protocol (EAP) EAP-MSCHAP v2.
1. Installing certificates on Windows computers.
Unpack the previously downloaded ZIP archive into a separate folder. Certificates should be installed in the "Local Computer" store. To do this, simply run the file "install-cert-win.bat" (administrator account required). As a result, the client certificate "vpnclient@[IP_address]" will be installed to "Local Computer"->"Personal"->"Certificates" store, and the certificate "ADEO VPN root CA" will be installed to "Local Computer"->"Trusted Root Certification Authorities" store, as shown in the picture "cert-console.jpg". You can check this using the MMC console (double-click the file "cert-console.msc").
2. Creating and configuring the IKEv2 VPN connection with Extended Authentication Protocol (EAP) EAP-MSCHAP v2.
The VPN connection must be created using standard Windows tools. The VPN connection should include:
CONNECTION OF 2 COMPUTERS THROUGH VPN
When the server starts for the first time, it creates 2 test users: "user1" and "user2" so you can try to establish 2 simultaneous connections from 2 different computers and check the visibility of these computers through this VPN server. Passwords for these users can be found in the Control Panel (Management->List Users). According to initial settings, the IP address 10.10.10.1 is assigned to "user1" and 10.10.10.2 is assigned to "user2".
If clients "user1" and "user2" are simultaneously connected to this server, they will be able to see each other. You can test it with "ping" command: in Windows computers you can click "Run..." menu item of Start Menu, then print "cmd" to open Command Prompt and then execute command: "ping 10.10.10.2" (or "ping 10.10.10.1" on another computer respectively).
After successfully completing the ping test, you can establish the secure connection between remote computers via VPN. In Windows computers, you can click "Run..." menu item of Start Menu and execute the command like "\\10.10.10.2\" to see the shared folders of another computer.
