STARTING THE SERVER

After launching, the VPN server becomes immediately fully operational with no additional setup required.

Linux username: admin

This server supports VPN connections:
PPTP (login, password)
L2TP without IPSec (login, password)
L2TP/IPSec-PSK (login, password, PSK).

When the server is first started, a Pre-Shared Key (PSK) is generated. This PSK key is the same for all VPN users. You can find PSK on a Linux welcome screen or you can find it in a file "/etc/ipsec.secrets". You can change it, if needed.

User management Web Panel:
https://Server_IP_Address/daloradius/
Please use "administrator" as username and your instance ID as password.

When accessing the Control Panel using the HTTPS, your web browser may display a warning about potential risks due to the use of IP address in the URL. In this case, you should proceed and accept the risks, as our goal is to encrypt traffic, and there is no reason to worry about using IP address in a web browser.

WINDOWS-CLIENT SETUP

In order to establish L2TP/IPSec-PSK connection from Windows, you may need to make changes to the Windows registry, otherwise Windows error code 809 or 789 may appear. To fix it:

• in section "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PolicyAgent" please create DWORD (32 bit) parameter "AssumeUDPEncapsulationContextOnSendRule" and set value 2 for it.
• in section "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RasMan\Parameters" set parameter "ProhibitIPSec" to 0.
• restart Windows.

When creating a VPN connection on Windows, you can use the "Use the default gateway on remote network" checkbox in order to allow/deny sending all traffic through the VPN.

It should be noted that the simultaneous connections to this VPN server of several Windows client devices that located behind a single NAT router may not work with L2TP-IPSec-PSK. In this case, we recommend to use PPTP connection for each Windows device.

CONNECTION OF 2 COMPUTERS THROUGH VPN

Web Panel allows you to assign static (fixed) or dynamic IP addresses to VPN clients.

When the server starts for the first time, it creates 2 test users: "user1" (10.1.1.10) and "user2" (10.1.1.20) with randomly generated passwords, so you can try to establish 2 simultaneous VPN connections from 2 different computers to check the visibility of these computers through this VPN server. You can find passwords for these users on a Linux SSH welcome screen or in user management web panel.

After 2 VPN connections Client-Server have been established, you can ping both of your client computers to make sure that they can see each other: in Windows computers you can click "Run..." menu item of Start Menu, then print "cmd" to open Command Prompt and then execute command: "ping 10.1.1.20" (or "ping 10.1.1.10" on another computer respectively).

After successfully completing the ping test, you can establish the secure connection between remote computers via VPN. In Windows computers, you can click "Run..." menu item of Start Menu and execute the command like "\\10.1.1.20\" to see the shared folders of another computer.

ADDITIONAL INFO

phpMyAdmin:
https://ipaddress/phpmyadmin/ 
Default username for phpMyAdmin: "administrator", initial password is your instance ID.
By default, access to phpMyAdmin is denied in .htaccess file: /usr/share/phpmyadmin/.htaccess

In addition to the web control panel, you can manage user accounts directly through MySQL (port 3306, username: remote, password is your instance ID, database: radius, table: radcheck - list of users, table: radusergroup - access status for users). The database is readable and writable via 3306 port.

The default local network is 10.1.1.0/24. To change the local network (for example, to 192.168.50.0/24) please run: 'sudo bash /home/admin/set_network.sh 192.168.50.0'