Overview
PPTP/L2TP-IPSec-PSK VPN Routing Server with User Management Web Panel. This VPN server allows multiple computers to see each other when they are connected to this server. Additionally, it can be used to provide the secure internet access for client computers via VPN, and the possibility of such internet access is controlled on the client side (for example, using "Use the default gateway on remote network" checkbox on Windows). This VPN server supports standard protocols PPTP and L2TP/IPSec-PSK that's supported by Windows, Android, Linux and iOS without third-party software on a client side. High server efficiency allows using it even on low-performance machines, that may reduce the costs. User access to this VPN server is controlled through the web panel or remotely via MySQL (port: 3306).
Areas of use:
- This VPN server can be used to organize remote work of employees by combining remotely located computers into a virtual network via VPN tunnels.
- The VPN server allows remote computers to be networked, even if they don't belong to a Domain or have different Workgroup names. This may be relevant for small businesses and home computers that do not have their own domain name server.
- Additionally, it can be used to provide the secure internet access for client computers via VPN. It is possible to enable or disable such internet access on the client side.
The key features of the VPN Routing Server:
- This VPN Server is easy-to-use. After launching, the VPN server is immediately fully operational. No server setup required.
- High performance. This VPN server can be used even on low-performance machines, that may reduce the costs.
- This VPN server can reserve the IP address for each user in the virtual network, which will be used every time the user connects to the VPN server.
- The number of VPN users is not limited. In the default configuration, the pool of reserved static IP addresses for VPN users contains 250 IP addresses, but it can be extended.
- Standard PPTP, L2TP/IPSec-PSK connection protocols that's supported by Windows, Android, Linux and iOS without installing of additional third-party software on a client side.
- User Management Web Panel. You can add, delete or edit user records. You can see which users are currently connected to the server. Remote user management via MySQL (port: 3306) is supported.
- High level of security. VPN security is provided by strong encryption algorithms.
Highlights
- This VPN Server is easy-to-use. After launching, the VPN Server is immediately fully operational. No server setup required. The maximum number of VPN users is 150.
- VPN Server supports standard protocols PPTP and L2TP-IPSec-PSK. The unique feature of this VPN Server is the ability to reserve the IP address for each user in the virtual network, which will be used every time the user connects to the VPN server.
- High server efficiency of this VPN server allows using it even on low-performance machines, that may reduce the costs.
Details
Typical total price
$0.073/hour
Features and programs
Financing for AWS Marketplace purchases
Pricing
Free trial
Instance type | Product cost/hour | EC2 cost/hour | Total/hour |
---|---|---|---|
t2.nano | $0.063 | $0.006 | $0.069 |
t2.micro AWS Free Tier | $0.063 | $0.012 | $0.075 |
t2.small | $0.063 | $0.023 | $0.086 |
t2.medium | $0.063 | $0.046 | $0.109 |
t2.large | $0.063 | $0.093 | $0.156 |
t2.xlarge | $0.063 | $0.186 | $0.249 |
t2.2xlarge | $0.063 | $0.371 | $0.434 |
t3.nano | $0.063 | $0.005 | $0.068 |
t3.micro AWS Free Tier Recommended | $0.063 | $0.01 | $0.073 |
t3.small | $0.063 | $0.021 | $0.084 |
Additional AWS infrastructure costs
Type | Cost |
---|---|
EBS General Purpose SSD (gp2) volumes | $0.10/per GB/month of provisioned storage |
Vendor refund policy
You may terminate the instance at anytime to stop incurring charges.
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Additional details
Usage instructions
STARTING THE SERVER
Linux username: admin
After launching, the VPN server becomes immediately fully operational with no additional setup required.
This server supports VPN connections:
- PPTP (login, password)
- L2TP without IPSec (login, password)
- L2TP/IPSec-PSK (login, password, PSK).
When the server is first started, a Pre-Shared Key (PSK) is generated. This key is the same for all VPN users. You can find PSK on a Linux welcome screen or you can find it in "/etc/ipsec.secrets". You can change it, if needed.
User management Web Panel:
- https://[Public IP address]
- use "administrator" as username and your instance ID as password.
When accessing the Control Panel using HTTPS, your web browser may display a warning about potential risks due to the use of IP address in the URL. In this case, you should proceed and accept the risks, as our goal is to encrypt traffic, and there is no reason to worry about using IP address in a web browser.
WINDOWS-CLIENT SETUP
In order to establish L2TP/IPSec-PSK connection from Windows, you may need to make changes to the Windows registry, otherwise Windows error code 809 or 789 may appear. To fix it:
- in section "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PolicyAgent" create a DWORD (32 bit) parameter "AssumeUDPEncapsulationContextOnSendRule" and set value 2 for it.
- in section "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RasMan\Parameters" set parameter "ProhibitIPSec" to 0.
- restart Windows.
When creating a VPN connection on Windows, you can use the "Use the default gateway on remote network" checkbox in order to allow/deny sending all traffic through the VPN.
It should be noted that the simultaneous connections to this VPN server of several Windows client devices that are located behind a single NAT router may not work with L2TP-IPSec-PSK. In this case, we recommend to use PPTP connection for each Windows device.
CONNECTION OF 2 COMPUTERS THROUGH VPN
Web Panel allows you to assign static (fixed) or dynamic IP addresses to VPN clients.
When the server starts for the first time, it creates 2 test users: "user1" (10.1.1.10) and "user2" (10.1.1.20) with randomly generated passwords, so you can try to establish 2 simultaneous VPN connections from 2 different computers to check the visibility of these computers through this VPN server. You can find passwords for these users on a Linux SSH welcome screen or in user management web panel.
After 2 VPN connections Client-Server have been established, you can ping both of your client computers to make sure that they can see each other: in Windows computers you can click "Run..." menu item of Start Menu, then print "cmd" to open Command Prompt and then execute command: "ping 10.1.1.20" (or "ping 10.1.1.10" on another computer respectively).
After successfully completing the ping test, you can establish the secure connection between remote computers via VPN. In Windows computers, you can click "Run..." menu item of Start Menu and execute the command like "\\10.1.1.20\" to see the shared folders of another computer.
ADDITIONAL INFO
phpMyAdmin:
- https://[Public IP address]/phpmyadmin/
- Default username for phpMyAdmin: "administrator", initial password is your instance ID.
- By default, access to phpMyAdmin is denied in .htaccess file: /usr/share/phpmyadmin/.htaccess
The default local network is 10.1.1.0/24. To change the local network (for example, to 192.168.50.0/24) please run: 'sudo bash /home/admin/set_network.sh 192.168.50.0'
Resources
Vendor resources
Support
Vendor support
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.