Ricmedia PC Help

Tech Guides for Everyone

Setup private VPN network or VPN service provider – complete guide

Setup private VPN network or VPN service provider – complete guide

I originally published this guide on it’s own website called “American Netflix Guide” to show you how to get the American version of Netflix, but all the steps can also be used to setup your own private VPN network, or even a VPN service provider.

If you see anything named “*netflix*” you can replace it if you know what you’re doing, otherwise just leave it until you’re more comfortable with setting up VPN servers (hostnames and TAP adapters especially). I suggest you set aside 2 hours for this tutorial and make sure you have a credit card handy for the cloud server you’ll need to purchase ($5 per month).

Contents

  1. Introduction, Preparation
  2. Choose a Cloud Server Provider & Initial Server Setup
  3. Install SoftEther
  4. Setup SoftEther
  5. Setup OpenVPN & SSTP
  6. Install & Setup dnsmasq, Setup IPTables
  7. Connecting to your VPN server, Summary

Introduction

Overview

We will be setting up a Debian Linux x64 cloud server and installing the excellent SoftEther VPN Server for VPN client access. We will also install dnsmasq for DHCP IP address allocation and finish the server by setting up basic IP Table firewall rules for security. Then we will install the SoftEther Server Admin software on your Windows PC to setup SoftEther Server and create user(s), then we move on to connecting your client PC to the VPN.

Get American Netflix Guide - SoftEther Server Administration Interface
SoftEther Server Admin Interface

Protocols

You will have a choice of 4 different VPN protocols; L2TP/IPSec, SoftEther SSL-VPN, OpenVPN and SSTP with the first two protocols working out-of-the-box, whereas the second two protocols will need some extra configuration (optional). I recommend L2TP/IPSec for Windows and MAC as they both have in-built clients for that protocol. For Linux I recommend SoftEther-SSL-VPN or OpenVPN.

Guide Format

The guide consists of text and images because as some people learn better visually, while others learn better with textual information. Each step is carefully written to make this guide accessible to everyone no matter what your skill level, therefore those of you with more experience can potentially skip over certain parts.

PuTTY Tips

Some very important tips before we get started. If you’re not familiar with the PuTTY SSH Client, it works a little differently in some regards, like when you highlight text inside it, it automatically copies it to your clipboard, you don’t need to right-click and copy as it’s already done.

Another aspect with PuTTY is when you want to paste text, all you need to do is move the cursor to the position you want (using the Arrow keys), then simply click your right mouse button once and it will paste the clipboard.

The PuTTY Interface
The PuTTY Interface

Preparation

Folders & Passwords

There are a few things we need to setup first to make this guide easier to use, the first is we need to create a project folder on your PC. Navigate to your Documents folder, then right-click inside it, choose New > Folder and name it VPNGuide and enter the new folder.

Right-click inside the folder, choose New > Text Document, name it info.txt, then click your mouse on the white space to save the file.

Now double-click on info.txt to open, then copy and paste the following text into it:

Visit RANDOM.org password generator, change password number to 5, then click the Get Passwords button which will generate 5 random passwords. Copy to clipboard the first password, then paste into the Cloud provider pass: field replacing [password], then repeat using the next generated password for each field that has [password].

Now we need to enter an email address for the Cloud provider email: field which can be your normal email address. For the SoftEther VPN client name: field type a username (usually your name ie. John).

Fill out your info.txt with generated passwords, a username and email address
Fill out your info.txt with generated passwords, a username and email address

Download & Install PuTTY SSH Client

Now we need to download probably the most widely used Windows utility ever, the PuTTY SSH Client. Click the following link to download the PuTTY SSH Client (choose 32bit if you’re unsure) and install as you would any other Windows application choosing Yes to “Create a desktop icon” option.

Download & Install SoftEther Server Manager

Now we want to download and install the SoftEther Server Manager for Windows (see screenshot below) and install as you would for any other application, leave everything at defaults.

Download SoftEther Server Managers for Windows

That finishes up our preparation so you can now move onto the next section Choose a Cloud Server Provider & Initial Server Setup.

Connect VPN using SSTP on Windows (all versions)

[youtube=https://youtu.be/tgfeRj8m7VM]

In this guide I will show you how to connect your Windows (all versions) PC/laptop to any VPN service that’s using the SSTP protocol. Secure Socket Tunneling Protocol is very secure and stable but only works on Windows computers. It can avoid firewalls because it runs over port 443 (SSL) which is rarely blocked because it’s used by all web browsers for secure browsing.

Before we start the connection setup process, you will need to find out the following details (best have them written or printed). If you are connecting to a paid VPN service, just login and your details and settings will be there. If you are connecting via a workplace, please contact your Network Administrator and ask them for the following details:

Required Info

  • Your VPN username
  • Your VPN password
  • The server name or IP address (ie. contoso.com or 102.562.243.12)
  • Optional or required encryption
  • The password protocol (PAP, CHAP, MSCHAP or EAP)

Once you have this info you can then watch the video above or follow the text guide below.

Connect via SSTP to VPN on Windows (all versions)

  1. Click on the Start icon Windows 10 Start Icon bottom-left of your screen
  2. Inside the search box, type Control Panel, then click on the first result
  3. Click on Network and Internet, then click Network and Sharing Center
  4. Now click on Set up a new connection or network link
  5. In the window that opens, select Connect to a workplace, then click Next
  6. Click on Use my Internet connection (VPN)
  7. Enter the server name or IP address into the Internet address box
  8. Enter a unique name you will recognize, ie Contoso (Work) or HomeVPN
  9. Leave the Use smart card check box unchecked
  10. (Windows 8.1 & 10) Leave Remember my credentials checked
  11. Leave Allow other people to use this connection unchecked (unless you trust everyone using the computer)
  12. (Windows VISTA, 7) Check the Don’t connect now checkbox
  13. Now click on Create (the window will now close)
  14. On the left pane, click on Change adapter settings
  15. Look for your new connection, then right-click on it, and choose Properties
  16. In the Properties window, select the Security tab
  17. For Type of VPN select Secure Socket Tunneling Protocol (SSTP)
  18. For Data encryption, select the encryption level your VPN service provider requires, if you’re unsure, select Require Encryption first, if you still cannot connect try Optional Encryption
  19. For Authentication, select the method your VPN service provider requires, if you’re unsure, select Allow these protocols option, then check PAP, CHAP and MS-CHAP v2 checkboxes
  20. Finally click OK to close the Properties window
  21. For extra convenience, Right-click on your connection icon again and choose Create shortcut, choose Yes to the alert box. This will create a handy icon on your desktop.
  22. Now simply right-click on the connection icon and choose Connect/Disconnect
  23. Windows will tell you if the connection was successful
  24. If you have any errors or the connection was unsuccessful, double-check all settings or contact your VPN service provider or network administrator.
  25. All done!
  26. NOTE* If you keep getting Error: 0x800B0109 see this guide

Install X.509 Certificate for SSTP VPN on Windows

[youtube=https://youtu.be/Lc26lBHWraU]

In this guide I will show you how to install an X.509 SSL encryption certificate (.crt) to connect to a VPN using the SSTP Protocol (aka MS-SSTP). SSTP is an excellent VPN protocol that easily traverses firewalls because it uses port 443 which is generally wide open to enable HTTPS secure web browsing. It’s also very fast for the same reason and offers good stability with minimal dropouts.

Before we begin there are a few requirements:

  • The X.509 security certificate file(s) available from your VPN provider or network admin
  • Administrator rights on your Windows PC (most accounts will have this)
  • *Note to Admins: the certificate name must match the hostname or the IP address of the server to work properly

Watch the video above or follow the text guide below.

Install X.509 Certificate for SSTP VPN

  1. Locate the X.509 .crt certificate files, unzip if required
  2. Click on the Start icon Windows 10 Start Icon bottom-left of your screen
  3. Type Run into the search box, then click the Run (Desktop app) result
  4. Now type MMC into the Open: text box, click Yes to allow the app to run
  5. The Microsoft Management Console window should now be open
  6. Go to File > Add/Remove Snap-in… then select Certificates and click Add >
  7. Select the Computer Account option, then click Next >
  8. Select the Local computer: (the computer this console is running on) option, then click Finish, then click OK to close the window
  9. On the left pane, expand folders to Certificates > Trusted Root Certification Authorities > Certificates
  10. Right click on Certificates, then click All tasks > Import (see below)Import X.509 Encryption Certificate on Microsoft Management Console
  11. In the Certificate Import Wizard, select the Local Machine option, then click Next
  12. Now click the Browse button and navigate to the downloaded certificate file (.crt) and double-click to select, then click Next
  13. Make sure that the Place all certificates in the following store: option is set to Trusted Root Certification Authorities (it’s usually the default) and click Next
  14. Now click Finish, then OK to the success alert message, finally close X the console window, choose No to the Save settings alert box
  15. You can now connect to the VPN server after setting up a new connection, see Connect VPN using SSTP on Windows (all versions) guide.

Fix Error: 0x800B0109

If you are trying to connect to a VPN using SSTP and keep getting Error 0x800B0109 on Windows XP/Vista/7 or "Error: A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider" error on Windows 8.1/10, this is because you need to install X.509 SSL encryption certificate(s) for the server(s) you’re connecting to. These will be available from your VPN service providers website in the form of vpn.myvpn.crt Certificate files. Once you have them, continue this guide to install (video further below).

Note for Admins: If you are also getting this error whilst setting up your servers, you need to make sure that when generating your .CRT Certificate files, the Name: field must match exactly the hostname or IP address of your server. For instance, if your server hostname is us.sfc.myvpn.com then enter this for the Name: field on your certificate. You can also put the IP address of your server too.

Fix A certificate chain processed but terminated in a root certificate which is not trusted by the trust provider error

Fix VPN SSTP error 0x800B0109

Setup a VPN connection on Windows 10

[youtube=https://www.youtube.com/watch?v=17yGOdfQoRM]

Windows 10 makes it really easy to setup a VPN Connection and today with governments snooping on everything we do, it makes good sense to have one already setup and ready to go. You will be able to switch the VPN connection on or off with a few clicks so it’s very easy.

Watch the video above or follow the text guide below.

How to Setup a VPN Connection on Windows 10

  1. Please make sure you have all your VPN service provider info on hand before starting this guide (server address, VPN type, username, password)
  2. Click on the Start Menu Windows 10 Start Icon button bottom-left
  3. Now click on the Settings Windows 10 Settings menu item
  4. Then click the Network & Internet Windows 10 Settings - Network & Internet icon
  5. Now click on the VPN menu item
  6. Click + Add a VPN connection
  7. Now enter your details as follows…
    1. VPN provider: Windows (built-in)
    2. Connection Name: [enter a descriptive name like MyVPN]
    3. Server name or address: [enter your VPN service URL, like vpn.btguard.com]
    4. VPN type: [choose a VPN type that your VPN provider supports like PPTP]
    5. Type of sign-in info: User name and password
    6. User name: [enter your VPN username, like RichieRich222]
    7. Password: [enter your VPN password, like abcde123456]
    8. Check the Remember my sign-in info checkbox
    9. Now click Save
    10. (you can also see the image further below)
  8. You should now see your new connection in the VPN settings window
  9. To connect, click on your VPN connection, then click the Connect button
  10. Windows will now attempt to connect and give you either a success or failure notice
  11. If you see a failure notice, double-check all settings (particularly VPN type) and try again.
  12. All done!
Windows 10 VPN Connection setup window
Example VPN setup inside the Windows 10 VPN connections window.