\u0110\u00ea\u0309 ha\u0323n ch\u00ea\u0301 nh\u01b0\u0303ng nguy c\u01a1 k\u00ea\u0309 tr\u00ean, vi\u00ea\u0323c gi\u01a1\u0301i ha\u0323n ngu\u00f4\u0300n truy c\u00e2\u0323p ho\u0103\u0323c thi\u00ea\u0301t l\u00e2\u0323p ca\u0301c k\u00ea\u0301t n\u00f4\u0301i an toa\u0300n h\u01a1n th\u00f4ng qua VPN \u0111\u00ea\u0301n server, \u0111\u0103\u0323c bi\u00ea\u0323t la\u0300 ca\u0301c server s\u01b0\u0309 du\u0323ng h\u00ea\u0323 \u0111i\u00ea\u0300u ha\u0300nh Windows la\u0300 m\u00f4\u0323t y\u00eau c\u00e2\u0300u c\u00e2\u0300n thi\u00ea\u0301t. \u01a0\u0309 ba\u0300i vi\u00ea\u0301t na\u0300y, Long V\u00e2n se\u0303 h\u01b0\u01a1\u0301ng d\u00e2\u0303n Quy\u0301 kha\u0301ch ca\u0301ch c\u00e2\u0301u hi\u0300nh k\u00ea\u0301t n\u00f4\u0301i VPN Client-to-Site \u0111\u1ebfn server Windows Server 2012.<\/p>\n
II. Tri\u00ea\u0309n khai VPN server<\/h4>\n\n- \n
C\u00e0i \u0111\u1eb7t VPN<\/strong><\/h4>\n\n- \u0110\u1ea7u ti\u00ean ta kh\u1edfi \u0111\u1ed9ng Server Manager s\u1eb5n c\u00f3 tr\u00ean c\u00e1c Window Server.
\n![\"\"](\"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2022\/10\/image-14.png\")
<\/li>\n - Ti\u1ebfn h\u00e0nh c\u00e0i \u0111\u1eb7t VPN b\u1eb1ng c\u00e1ch Add roles and features.Ch\u1ecdn Next \u0111\u1ebfn c\u1eeda s\u1ed5 Server Role, ch\u1ecdn Remote Access.
\n![\"\"](\"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2022\/10\/Windows_Install_Remote-Access.png\")
<\/li>\n - Ti\u1ebfp t\u1ee5c ch\u1ecdn Next \u0111\u1ebfn c\u1eeda s\u1ed5 Role Serivce, ch\u1ecdn Direct Acess and VPN(RAS)<\/strong> v\u00e0\u00a0 Routting<\/strong>. L\u01b0u \u00fd, khi ch\u1ecdn Direct Acess and VPN(RAS)<\/strong>, h\u1ec7 \u0111i\u1ec1u h\u00e0nh s\u1ebd y\u00eau c\u1ea7u c\u00e0i th\u00eam c\u00e1c Feature \u0111i k\u00e8m, ch\u1ecdn Add Features<\/strong>.
\n![\"\"](\"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2022\/10\/Windows_Install_VPN.png\")
<\/li>\n- Ti\u1ebfp t\u1ee5c ch\u1ecdn Next \u0111\u1ec3 ti\u1ebfp t\u1ee5c, \u0111\u1ebfn c\u1eeda s\u1ed5 Confimation<\/strong>, nh\u1ea5n Install<\/strong> \u0111\u1ec3 ti\u1ebfn h\u00e0nh c\u00e0i \u0111\u1eb7t.
\n![\"\"](\"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2022\/10\/image-19.png\")
<\/strong><\/li>\n<\/ul>\n<\/li>\n- C\u1ea5u<\/span> h\u00ecnh VPN server.<\/span><\/strong>\n
\n- M\u1edf Routing and\u00a0 Remote Access t\u1eeb c\u1eeda s\u1ed5 Server Manager.<\/li>\n
- Trong c\u1eeda s\u1ed5 Routing and\u00a0 Remote Access, right-click v\u00e0o WIN-0N3\u2026(ph\u1ea7n n\u00e0y t\u00ean c\u1ee7a m\u00e1y ch\u1ee7) –> Ch\u1ecdn Configure and Enable Routing and Remote Access<\/strong>.
\n![\"\"](\"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2022\/10\/image-23.png\")
<\/li>\n- Ch\u1ecdn Next –> ch\u1ecdn Custom configuration<\/strong>.
\n![\"\"](\"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2022\/10\/image-24.png\")
\n![\"\"](\"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2022\/10\/image-25-e1667186302204.png\")
<\/li>\n- Ch\u1ecdn Next –> Ch\u1ecdn VPN access<\/strong> v\u00e0 LAN Routing<\/strong>.
\n![\"\"](\"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2022\/10\/image-26.png\")
<\/li>\n- Next –> Finish –> Cu\u1ed1i c\u00f9ng nh\u1ea5n Start service<\/strong>.
\n![\"\"](\"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2022\/10\/image-27.png\")
<\/li>\n- Ti\u1ebfn h\u00e0nh th\u00eam IP LAN cho VPN. Right-click v\u00e0o WIN-0N3…(t\u00ean server ) –> ch\u1ecdn Properties<\/strong>.
\n![\"\"](\"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2022\/10\/image-28.png\")
<\/li>\n- Tab IPv4 ch\u1ecdn Static address pool truy\u1ec1n d\u00e3y IP LAN v\u00e0o \u0111\u1ec3 c\u00f3 th\u1ec3 c\u1ea5p ph\u00e1t VPN cho t\u1eebng user b\u00ean ngo\u00e0i k\u1ebft n\u1ed1i t\u1edbi. \u1ede \u0111\u00e2y m\u00ecnh s\u1ebd truy\u1ec1n v\u00e0o t\u1eeb kho\u1ea3ng 172.168.200.10 – 172.168.200.50. t\u00f9y v\u00e0o m\u1ee9c \u0111\u1ed9 s\u1eed d\u1ee5ng m\u00e0 c\u00f3 th\u1ec3 \u0111i\u1ec1u ch\u1ec9nh \u1edf \u0111\u1ea7u v\u00e0 cu\u1ed1i d\u00e3y IP \u0111\u1ec3 t\u0103ng th\u00eam user c\u1ea7n thi\u1ebft. Sau \u0111\u00f3 Ok \u0111\u1ec3 l\u01b0u l\u1ea1i.
\n![\"\"](\"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2022\/10\/image-29.png\")
<\/li>\n<\/ul>\n<\/li>\n - \n
C\u1ea5u h\u00ecnh Firewall.<\/strong><\/h4>\n\n- Ti\u1ebfp t\u1ee5c m\u1edf Window Power Shell \u0111\u1ec3 m\u1edf c\u00e1c port c\u1ea7n thi\u1ebft cho VPN ta ch\u1ea1y th\u00eam c\u00e1c d\u00f2ng l\u1ec7nh sau:\n
\nNew-NetFirewallRule -DisplayName \"VPNTCP\" -Direction inbound -Profile Any -Action Allow -LocalPort 1723,1701,443 -Protocol TCP<\/code><\/li>\nNew-NetFirewallRule -DisplayName \"VPNUDP\" -Direction inbound -Profile Any -Action Allow -LocalPort 500 -Protocol UDP<\/code><\/li>\nNew-NetFirewallRule -DisplayName \"GRE\" -Direction inbound -Protocol 47 -Profile Any -Action Allow<\/code>
\n![\"\"](\"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2022\/10\/image-30.png\")
<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/li>\n- \n
T\u1ea1o user \u0111\u1ec3 ti\u1ebfn h\u00e0nh k\u1ebft n\u1ed1i VPN.<\/h4>\n\n- Ta ph\u1ea3i chu\u1ed9t bi\u1ec3u t\u01b0\u1ee3ng Windows –> ch\u1ecdn Computer Management<\/strong> –> User and Local Groups<\/strong> –>User<\/strong> –> New user<\/strong> –>T\u1ea1o user v\u00e0 \u0111\u1eb7t password. L\u01b0u \u00fd b\u1ecf d\u1ea5u tick ” User must change password at next login <\/strong>” \u0111\u1ec3 tr\u00e1nh ph\u1ea3i \u0111\u1ed5i password \u1edf l\u1ea7n \u0111\u0103ng nh\u1eadp k\u1ebf ti\u1ebfp.
\n![\"\"](\"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2022\/10\/image-31-e1667186713118.png\")
<\/li>\n- Sau khi t\u1ea1o user xong ta t\u00ecm v\u00e0 nh\u1ea5n Right-click v\u00e0o user v\u1eeba t\u1ea1o –> Properties –> Tab Dial-In –> Ch\u1ecdn Allow access –> Apply v\u00e0 OK. T\u00f9y ch\u1ecdn cho ph\u00e9p User c\u00f3 th\u1ec3 x\u00e1c th\u1ef1c truy c\u1eadp VPN.
\n![\"\"](\"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2022\/10\/image-32.png\")
<\/li>\n<\/ul>\n<\/li>\n<\/ol>\nIII. C\u00e2\u0301u hi\u0300nh VPN tr\u00ean ma\u0301y ca\u0301 nh\u00e2n<\/h4>\n\n- Ti\u1ebfn h\u00e0nh t\u1ea1o k\u1ebft n\u1ed1i VPN \u1edf m\u00e1y c\u00e1 nh\u00e2n<\/strong> (thao t\u00e1c tr\u00ean m\u00e1y th\u1eadt) \u0111\u1ec3 k\u1ebft n\u1ed1i t\u1edbi VPN server.\n
\n- Bi\u1ec3u t\u01b0\u1ee3ng Window –> Setting \u00e0 VPN Setting.
\n![\"\"](\"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2022\/10\/image-33.png\")
<\/li>\n - Ch\u1ecdn Add a VPN connection –> \u0110i\u1ec1n c\u00e1c th\u00f4ng tin c\u1ea7n thi\u1ebft \u0111\u1ec3 t\u1ea1o k\u1ebft n\u1ed1i –> Save.
\n![\"\"](\"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-31-145759.png\")
<\/li>\n - Sau khi t\u1ea1o k\u1ebft n\u1ed1i VPN xong –> b\u00ean ph\u1ea3i m\u00e0n h\u00ecnh ta ch\u1ecdn Change adapter options –> Card m\u1ea1ng VPN PPTP v\u1eeba t\u1ea1o s\u1ebd xu\u1ea5t hi\u1ec7n.
\n![\"\"](\"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2022\/10\/image-35.png\")
<\/li>\n - Right-Click v\u00e0o card VPN v\u1eeba t\u1ea1o, ch\u1ecdn Propperties –> tab Networking –> Internet Protocol Version 4( TCP\/IPv4) –> Advanced –> B\u1ecf ch\u1ecdn ” Use default gateway on remote network ” . Ph\u1ea7n n\u00e0y \u0111\u1ec3 tr\u00e1nh khi ta k\u1ebft n\u1ed1i t\u1edbi VPN server b\u00ean ngo\u00e0i m\u00e1y c\u00e1 nh\u00e2n s\u1ebd m\u1ea5t k\u1ebft n\u1ed1i m\u1ea1ng.
\n![\"\"](\"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2022\/10\/image-36.png\")
<\/li>\n - Cu\u1ed1i c\u00f9ng ti\u1ebfn h\u00e0nh connect VPN v\u00e0 sau \u0111\u00f3 l\u00e0 ki\u1ec3m tra l\u1ea1i remote v\u1edbi IP private tr\u00ean server \u1ea3o l\u00fac \u0111\u1ea7u ta \u0111\u00e3 khai b\u00e1o t\u1eeb 172.168.200.10-50 m\u1eb7c \u0111\u1ecbnh server VPN s\u1ebd l\u1ea5y IP private \u0111\u1ea7u ti\u00ean trong d\u00e3y v\u00e0 c\u1ea5p ph\u00e1t c\u00e1c IP c\u00f2n l\u1ea1i cho c\u00e1c client VPN k\u1ebft n\u1ed1i \u0111\u1ebfn.
\n![\"\"](\"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2022\/10\/image-37.png\")
\n![\"\"](\"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2022\/10\/image-38.png\")
<\/li>\n<\/ul>\n<\/li>\n<\/ol>\nNh\u01b0 v\u1eady l\u00e0 m\u00ecnh \u0111\u00e3 h\u01b0\u1edbng d\u1eabn xong ph\u1ea7n c\u00e0i \u0111\u1eb7t v\u00e0 c\u1ea5u h\u00ecnh VPN tr\u00ean windows server 2012. Ch\u00fac c\u00e1c b\u1ea1n th\u00e0nh c\u00f4ng.<\/p>\n","protected":false},"excerpt":{"rendered":"
I. T\u00f4\u0309ng quan Hi\u00ea\u0323n nay, do nhu c\u00e2\u0300u pha\u0301t tri\u00ea\u0309n va\u0300 m\u01a1\u0309 r\u00f4\u0323ng quy m\u00f4 hoa\u0323t \u0111\u00f4\u0323ng, vi\u00ea\u0323c truy c\u00e2\u0323p va\u0300 s\u01b0\u0309 du\u0323ng d\u01b0\u0303 li\u00ea\u0323u tr\u00ean Cloud nga\u0300y ca\u0300ng ph\u00f4\u0309 bi\u00ea\u0301n, ke\u0300m theo \u0111o\u0301 la\u0300 nguy c\u01a1 l\u01a1\u0301n v\u00ea\u0300 an toa\u0300n th\u00f4ng tin, nh\u01b0: D\u00ea\u0309 bi\u0323 t\u00e2\u0301n c\u00f4ng pha\u0301 hoa\u0323i va\u0300 ma\u0303 ho\u0301a d\u01b0\u0303 li\u00ea\u0323u. […]<\/p>\n","protected":false},"author":5,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_oasis_is_in_workflow":0,"_oasis_original":0,"footnotes":""},"categories":[15],"tags":[31,65],"class_list":["post-1369","post","type-post","status-publish","format-standard","hentry","category-windows","tag-vpn","tag-windows"],"_links":{"self":[{"href":"https:\/\/longvan.net\/cong-dong\/wp-json\/wp\/v2\/posts\/1369","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/longvan.net\/cong-dong\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/longvan.net\/cong-dong\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/longvan.net\/cong-dong\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/longvan.net\/cong-dong\/wp-json\/wp\/v2\/comments?post=1369"}],"version-history":[{"count":17,"href":"https:\/\/longvan.net\/cong-dong\/wp-json\/wp\/v2\/posts\/1369\/revisions"}],"predecessor-version":[{"id":1435,"href":"https:\/\/longvan.net\/cong-dong\/wp-json\/wp\/v2\/posts\/1369\/revisions\/1435"}],"wp:attachment":[{"href":"https:\/\/longvan.net\/cong-dong\/wp-json\/wp\/v2\/media?parent=1369"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/longvan.net\/cong-dong\/wp-json\/wp\/v2\/categories?post=1369"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/longvan.net\/cong-dong\/wp-json\/wp\/v2\/tags?post=1369"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
C\u00e0i \u0111\u1eb7t VPN<\/strong><\/h4>\n\n- \u0110\u1ea7u ti\u00ean ta kh\u1edfi \u0111\u1ed9ng Server Manager s\u1eb5n c\u00f3 tr\u00ean c\u00e1c Window Server.
\n<\/li>\n - Ti\u1ebfn h\u00e0nh c\u00e0i \u0111\u1eb7t VPN b\u1eb1ng c\u00e1ch Add roles and features.Ch\u1ecdn Next \u0111\u1ebfn c\u1eeda s\u1ed5 Server Role, ch\u1ecdn Remote Access.
\n<\/li>\n - Ti\u1ebfp t\u1ee5c ch\u1ecdn Next \u0111\u1ebfn c\u1eeda s\u1ed5 Role Serivce, ch\u1ecdn Direct Acess and VPN(RAS)<\/strong> v\u00e0\u00a0 Routting<\/strong>. L\u01b0u \u00fd, khi ch\u1ecdn Direct Acess and VPN(RAS)<\/strong>, h\u1ec7 \u0111i\u1ec1u h\u00e0nh s\u1ebd y\u00eau c\u1ea7u c\u00e0i th\u00eam c\u00e1c Feature \u0111i k\u00e8m, ch\u1ecdn Add Features<\/strong>.
\n<\/li>\n- Ti\u1ebfp t\u1ee5c ch\u1ecdn Next \u0111\u1ec3 ti\u1ebfp t\u1ee5c, \u0111\u1ebfn c\u1eeda s\u1ed5 Confimation<\/strong>, nh\u1ea5n Install<\/strong> \u0111\u1ec3 ti\u1ebfn h\u00e0nh c\u00e0i \u0111\u1eb7t.
\n<\/strong><\/li>\n<\/ul>\n<\/li>\n- C\u1ea5u<\/span> h\u00ecnh VPN server.<\/span><\/strong>\n
\n- M\u1edf Routing and\u00a0 Remote Access t\u1eeb c\u1eeda s\u1ed5 Server Manager.<\/li>\n
- Trong c\u1eeda s\u1ed5 Routing and\u00a0 Remote Access, right-click v\u00e0o WIN-0N3\u2026(ph\u1ea7n n\u00e0y t\u00ean c\u1ee7a m\u00e1y ch\u1ee7) –> Ch\u1ecdn Configure and Enable Routing and Remote Access<\/strong>.
\n<\/li>\n- Ch\u1ecdn Next –> ch\u1ecdn Custom configuration<\/strong>.
\n
\n<\/li>\n- Ch\u1ecdn Next –> Ch\u1ecdn VPN access<\/strong> v\u00e0 LAN Routing<\/strong>.
\n<\/li>\n- Next –> Finish –> Cu\u1ed1i c\u00f9ng nh\u1ea5n Start service<\/strong>.
\n<\/li>\n- Ti\u1ebfn h\u00e0nh th\u00eam IP LAN cho VPN. Right-click v\u00e0o WIN-0N3…(t\u00ean server ) –> ch\u1ecdn Properties<\/strong>.
\n<\/li>\n- Tab IPv4 ch\u1ecdn Static address pool truy\u1ec1n d\u00e3y IP LAN v\u00e0o \u0111\u1ec3 c\u00f3 th\u1ec3 c\u1ea5p ph\u00e1t VPN cho t\u1eebng user b\u00ean ngo\u00e0i k\u1ebft n\u1ed1i t\u1edbi. \u1ede \u0111\u00e2y m\u00ecnh s\u1ebd truy\u1ec1n v\u00e0o t\u1eeb kho\u1ea3ng 172.168.200.10 – 172.168.200.50. t\u00f9y v\u00e0o m\u1ee9c \u0111\u1ed9 s\u1eed d\u1ee5ng m\u00e0 c\u00f3 th\u1ec3 \u0111i\u1ec1u ch\u1ec9nh \u1edf \u0111\u1ea7u v\u00e0 cu\u1ed1i d\u00e3y IP \u0111\u1ec3 t\u0103ng th\u00eam user c\u1ea7n thi\u1ebft. Sau \u0111\u00f3 Ok \u0111\u1ec3 l\u01b0u l\u1ea1i.
\n<\/li>\n<\/ul>\n<\/li>\n - \n
C\u1ea5u h\u00ecnh Firewall.<\/strong><\/h4>\n\n- Ti\u1ebfp t\u1ee5c m\u1edf Window Power Shell \u0111\u1ec3 m\u1edf c\u00e1c port c\u1ea7n thi\u1ebft cho VPN ta ch\u1ea1y th\u00eam c\u00e1c d\u00f2ng l\u1ec7nh sau:\n
\nNew-NetFirewallRule -DisplayName \"VPNTCP\" -Direction inbound -Profile Any -Action Allow -LocalPort 1723,1701,443 -Protocol TCP<\/code><\/li>\nNew-NetFirewallRule -DisplayName \"VPNUDP\" -Direction inbound -Profile Any -Action Allow -LocalPort 500 -Protocol UDP<\/code><\/li>\nNew-NetFirewallRule -DisplayName \"GRE\" -Direction inbound -Protocol 47 -Profile Any -Action Allow<\/code>
\n<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/li>\n- \n
T\u1ea1o user \u0111\u1ec3 ti\u1ebfn h\u00e0nh k\u1ebft n\u1ed1i VPN.<\/h4>\n\n- Ta ph\u1ea3i chu\u1ed9t bi\u1ec3u t\u01b0\u1ee3ng Windows –> ch\u1ecdn Computer Management<\/strong> –> User and Local Groups<\/strong> –>User<\/strong> –> New user<\/strong> –>T\u1ea1o user v\u00e0 \u0111\u1eb7t password. L\u01b0u \u00fd b\u1ecf d\u1ea5u tick ” User must change password at next login <\/strong>” \u0111\u1ec3 tr\u00e1nh ph\u1ea3i \u0111\u1ed5i password \u1edf l\u1ea7n \u0111\u0103ng nh\u1eadp k\u1ebf ti\u1ebfp.
\n<\/li>\n- Sau khi t\u1ea1o user xong ta t\u00ecm v\u00e0 nh\u1ea5n Right-click v\u00e0o user v\u1eeba t\u1ea1o –> Properties –> Tab Dial-In –> Ch\u1ecdn Allow access –> Apply v\u00e0 OK. T\u00f9y ch\u1ecdn cho ph\u00e9p User c\u00f3 th\u1ec3 x\u00e1c th\u1ef1c truy c\u1eadp VPN.
\n<\/li>\n<\/ul>\n<\/li>\n<\/ol>\nIII. C\u00e2\u0301u hi\u0300nh VPN tr\u00ean ma\u0301y ca\u0301 nh\u00e2n<\/h4>\n\n- Ti\u1ebfn h\u00e0nh t\u1ea1o k\u1ebft n\u1ed1i VPN \u1edf m\u00e1y c\u00e1 nh\u00e2n<\/strong> (thao t\u00e1c tr\u00ean m\u00e1y th\u1eadt) \u0111\u1ec3 k\u1ebft n\u1ed1i t\u1edbi VPN server.\n
\n- Bi\u1ec3u t\u01b0\u1ee3ng Window –> Setting \u00e0 VPN Setting.
\n<\/li>\n - Ch\u1ecdn Add a VPN connection –> \u0110i\u1ec1n c\u00e1c th\u00f4ng tin c\u1ea7n thi\u1ebft \u0111\u1ec3 t\u1ea1o k\u1ebft n\u1ed1i –> Save.
\n<\/li>\n - Sau khi t\u1ea1o k\u1ebft n\u1ed1i VPN xong –> b\u00ean ph\u1ea3i m\u00e0n h\u00ecnh ta ch\u1ecdn Change adapter options –> Card m\u1ea1ng VPN PPTP v\u1eeba t\u1ea1o s\u1ebd xu\u1ea5t hi\u1ec7n.
\n<\/li>\n - Right-Click v\u00e0o card VPN v\u1eeba t\u1ea1o, ch\u1ecdn Propperties –> tab Networking –> Internet Protocol Version 4( TCP\/IPv4) –> Advanced –> B\u1ecf ch\u1ecdn ” Use default gateway on remote network ” . Ph\u1ea7n n\u00e0y \u0111\u1ec3 tr\u00e1nh khi ta k\u1ebft n\u1ed1i t\u1edbi VPN server b\u00ean ngo\u00e0i m\u00e1y c\u00e1 nh\u00e2n s\u1ebd m\u1ea5t k\u1ebft n\u1ed1i m\u1ea1ng.
\n<\/li>\n - Cu\u1ed1i c\u00f9ng ti\u1ebfn h\u00e0nh connect VPN v\u00e0 sau \u0111\u00f3 l\u00e0 ki\u1ec3m tra l\u1ea1i remote v\u1edbi IP private tr\u00ean server \u1ea3o l\u00fac \u0111\u1ea7u ta \u0111\u00e3 khai b\u00e1o t\u1eeb 172.168.200.10-50 m\u1eb7c \u0111\u1ecbnh server VPN s\u1ebd l\u1ea5y IP private \u0111\u1ea7u ti\u00ean trong d\u00e3y v\u00e0 c\u1ea5p ph\u00e1t c\u00e1c IP c\u00f2n l\u1ea1i cho c\u00e1c client VPN k\u1ebft n\u1ed1i \u0111\u1ebfn.
\n
\n<\/li>\n<\/ul>\n<\/li>\n<\/ol>\nNh\u01b0 v\u1eady l\u00e0 m\u00ecnh \u0111\u00e3 h\u01b0\u1edbng d\u1eabn xong ph\u1ea7n c\u00e0i \u0111\u1eb7t v\u00e0 c\u1ea5u h\u00ecnh VPN tr\u00ean windows server 2012. Ch\u00fac c\u00e1c b\u1ea1n th\u00e0nh c\u00f4ng.<\/p>\n","protected":false},"excerpt":{"rendered":"
I. T\u00f4\u0309ng quan Hi\u00ea\u0323n nay, do nhu c\u00e2\u0300u pha\u0301t tri\u00ea\u0309n va\u0300 m\u01a1\u0309 r\u00f4\u0323ng quy m\u00f4 hoa\u0323t \u0111\u00f4\u0323ng, vi\u00ea\u0323c truy c\u00e2\u0323p va\u0300 s\u01b0\u0309 du\u0323ng d\u01b0\u0303 li\u00ea\u0323u tr\u00ean Cloud nga\u0300y ca\u0300ng ph\u00f4\u0309 bi\u00ea\u0301n, ke\u0300m theo \u0111o\u0301 la\u0300 nguy c\u01a1 l\u01a1\u0301n v\u00ea\u0300 an toa\u0300n th\u00f4ng tin, nh\u01b0: D\u00ea\u0309 bi\u0323 t\u00e2\u0301n c\u00f4ng pha\u0301 hoa\u0323i va\u0300 ma\u0303 ho\u0301a d\u01b0\u0303 li\u00ea\u0323u. […]<\/p>\n","protected":false},"author":5,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_oasis_is_in_workflow":0,"_oasis_original":0,"footnotes":""},"categories":[15],"tags":[31,65],"class_list":["post-1369","post","type-post","status-publish","format-standard","hentry","category-windows","tag-vpn","tag-windows"],"_links":{"self":[{"href":"https:\/\/longvan.net\/cong-dong\/wp-json\/wp\/v2\/posts\/1369","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/longvan.net\/cong-dong\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/longvan.net\/cong-dong\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/longvan.net\/cong-dong\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/longvan.net\/cong-dong\/wp-json\/wp\/v2\/comments?post=1369"}],"version-history":[{"count":17,"href":"https:\/\/longvan.net\/cong-dong\/wp-json\/wp\/v2\/posts\/1369\/revisions"}],"predecessor-version":[{"id":1435,"href":"https:\/\/longvan.net\/cong-dong\/wp-json\/wp\/v2\/posts\/1369\/revisions\/1435"}],"wp:attachment":[{"href":"https:\/\/longvan.net\/cong-dong\/wp-json\/wp\/v2\/media?parent=1369"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/longvan.net\/cong-dong\/wp-json\/wp\/v2\/categories?post=1369"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/longvan.net\/cong-dong\/wp-json\/wp\/v2\/tags?post=1369"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
<\/li>\n\n
<\/li>\n\n
<\/li>\n\n
<\/strong><\/li>\n<\/ul>\n<\/li>\n- \n
- M\u1edf Routing and\u00a0 Remote Access t\u1eeb c\u1eeda s\u1ed5 Server Manager.<\/li>\n
- Trong c\u1eeda s\u1ed5 Routing and\u00a0 Remote Access, right-click v\u00e0o WIN-0N3\u2026(ph\u1ea7n n\u00e0y t\u00ean c\u1ee7a m\u00e1y ch\u1ee7) –> Ch\u1ecdn Configure and Enable Routing and Remote Access<\/strong>.
\n<\/li>\n- Ch\u1ecdn Next –> ch\u1ecdn Custom configuration<\/strong>.
\n
\n<\/li>\n- Ch\u1ecdn Next –> Ch\u1ecdn VPN access<\/strong> v\u00e0 LAN Routing<\/strong>.
\n<\/li>\n- Next –> Finish –> Cu\u1ed1i c\u00f9ng nh\u1ea5n Start service<\/strong>.
\n<\/li>\n- Ti\u1ebfn h\u00e0nh th\u00eam IP LAN cho VPN. Right-click v\u00e0o WIN-0N3…(t\u00ean server ) –> ch\u1ecdn Properties<\/strong>.
\n<\/li>\n- Tab IPv4 ch\u1ecdn Static address pool truy\u1ec1n d\u00e3y IP LAN v\u00e0o \u0111\u1ec3 c\u00f3 th\u1ec3 c\u1ea5p ph\u00e1t VPN cho t\u1eebng user b\u00ean ngo\u00e0i k\u1ebft n\u1ed1i t\u1edbi. \u1ede \u0111\u00e2y m\u00ecnh s\u1ebd truy\u1ec1n v\u00e0o t\u1eeb kho\u1ea3ng 172.168.200.10 – 172.168.200.50. t\u00f9y v\u00e0o m\u1ee9c \u0111\u1ed9 s\u1eed d\u1ee5ng m\u00e0 c\u00f3 th\u1ec3 \u0111i\u1ec1u ch\u1ec9nh \u1edf \u0111\u1ea7u v\u00e0 cu\u1ed1i d\u00e3y IP \u0111\u1ec3 t\u0103ng th\u00eam user c\u1ea7n thi\u1ebft. Sau \u0111\u00f3 Ok \u0111\u1ec3 l\u01b0u l\u1ea1i.
\n<\/li>\n<\/ul>\n<\/li>\n- \n
C\u1ea5u h\u00ecnh Firewall.<\/strong><\/h4>\n
- \n
- Ti\u1ebfp t\u1ee5c m\u1edf Window Power Shell \u0111\u1ec3 m\u1edf c\u00e1c port c\u1ea7n thi\u1ebft cho VPN ta ch\u1ea1y th\u00eam c\u00e1c d\u00f2ng l\u1ec7nh sau:\n
- \n
New-NetFirewallRule -DisplayName \"VPNTCP\" -Direction inbound -Profile Any -Action Allow -LocalPort 1723,1701,443 -Protocol TCP<\/code><\/li>\nNew-NetFirewallRule -DisplayName \"VPNUDP\" -Direction inbound -Profile Any -Action Allow -LocalPort 500 -Protocol UDP<\/code><\/li>\nNew-NetFirewallRule -DisplayName \"GRE\" -Direction inbound -Protocol 47 -Profile Any -Action Allow<\/code>
\n<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/li>\n- \n
T\u1ea1o user \u0111\u1ec3 ti\u1ebfn h\u00e0nh k\u1ebft n\u1ed1i VPN.<\/h4>\n
- \n
- Ta ph\u1ea3i chu\u1ed9t bi\u1ec3u t\u01b0\u1ee3ng Windows –> ch\u1ecdn Computer Management<\/strong> –> User and Local Groups<\/strong> –>User<\/strong> –> New user<\/strong> –>T\u1ea1o user v\u00e0 \u0111\u1eb7t password. L\u01b0u \u00fd b\u1ecf d\u1ea5u tick ” User must change password at next login <\/strong>” \u0111\u1ec3 tr\u00e1nh ph\u1ea3i \u0111\u1ed5i password \u1edf l\u1ea7n \u0111\u0103ng nh\u1eadp k\u1ebf ti\u1ebfp.
\n<\/li>\n- Sau khi t\u1ea1o user xong ta t\u00ecm v\u00e0 nh\u1ea5n Right-click v\u00e0o user v\u1eeba t\u1ea1o –> Properties –> Tab Dial-In –> Ch\u1ecdn Allow access –> Apply v\u00e0 OK. T\u00f9y ch\u1ecdn cho ph\u00e9p User c\u00f3 th\u1ec3 x\u00e1c th\u1ef1c truy c\u1eadp VPN.
\n<\/li>\n<\/ul>\n<\/li>\n<\/ol>\nIII. C\u00e2\u0301u hi\u0300nh VPN tr\u00ean ma\u0301y ca\u0301 nh\u00e2n<\/h4>\n
- \n
- Ti\u1ebfn h\u00e0nh t\u1ea1o k\u1ebft n\u1ed1i VPN \u1edf m\u00e1y c\u00e1 nh\u00e2n<\/strong> (thao t\u00e1c tr\u00ean m\u00e1y th\u1eadt) \u0111\u1ec3 k\u1ebft n\u1ed1i t\u1edbi VPN server.\n
- \n
- Bi\u1ec3u t\u01b0\u1ee3ng Window –> Setting \u00e0 VPN Setting.
\n<\/li>\n - Ch\u1ecdn Add a VPN connection –> \u0110i\u1ec1n c\u00e1c th\u00f4ng tin c\u1ea7n thi\u1ebft \u0111\u1ec3 t\u1ea1o k\u1ebft n\u1ed1i –> Save.
\n<\/li>\n - Sau khi t\u1ea1o k\u1ebft n\u1ed1i VPN xong –> b\u00ean ph\u1ea3i m\u00e0n h\u00ecnh ta ch\u1ecdn Change adapter options –> Card m\u1ea1ng VPN PPTP v\u1eeba t\u1ea1o s\u1ebd xu\u1ea5t hi\u1ec7n.
\n<\/li>\n - Right-Click v\u00e0o card VPN v\u1eeba t\u1ea1o, ch\u1ecdn Propperties –> tab Networking –> Internet Protocol Version 4( TCP\/IPv4) –> Advanced –> B\u1ecf ch\u1ecdn ” Use default gateway on remote network ” . Ph\u1ea7n n\u00e0y \u0111\u1ec3 tr\u00e1nh khi ta k\u1ebft n\u1ed1i t\u1edbi VPN server b\u00ean ngo\u00e0i m\u00e1y c\u00e1 nh\u00e2n s\u1ebd m\u1ea5t k\u1ebft n\u1ed1i m\u1ea1ng.
\n<\/li>\n - Cu\u1ed1i c\u00f9ng ti\u1ebfn h\u00e0nh connect VPN v\u00e0 sau \u0111\u00f3 l\u00e0 ki\u1ec3m tra l\u1ea1i remote v\u1edbi IP private tr\u00ean server \u1ea3o l\u00fac \u0111\u1ea7u ta \u0111\u00e3 khai b\u00e1o t\u1eeb 172.168.200.10-50 m\u1eb7c \u0111\u1ecbnh server VPN s\u1ebd l\u1ea5y IP private \u0111\u1ea7u ti\u00ean trong d\u00e3y v\u00e0 c\u1ea5p ph\u00e1t c\u00e1c IP c\u00f2n l\u1ea1i cho c\u00e1c client VPN k\u1ebft n\u1ed1i \u0111\u1ebfn.
\n
\n<\/li>\n<\/ul>\n<\/li>\n<\/ol>\nNh\u01b0 v\u1eady l\u00e0 m\u00ecnh \u0111\u00e3 h\u01b0\u1edbng d\u1eabn xong ph\u1ea7n c\u00e0i \u0111\u1eb7t v\u00e0 c\u1ea5u h\u00ecnh VPN tr\u00ean windows server 2012. Ch\u00fac c\u00e1c b\u1ea1n th\u00e0nh c\u00f4ng.<\/p>\n","protected":false},"excerpt":{"rendered":"
I. T\u00f4\u0309ng quan Hi\u00ea\u0323n nay, do nhu c\u00e2\u0300u pha\u0301t tri\u00ea\u0309n va\u0300 m\u01a1\u0309 r\u00f4\u0323ng quy m\u00f4 hoa\u0323t \u0111\u00f4\u0323ng, vi\u00ea\u0323c truy c\u00e2\u0323p va\u0300 s\u01b0\u0309 du\u0323ng d\u01b0\u0303 li\u00ea\u0323u tr\u00ean Cloud nga\u0300y ca\u0300ng ph\u00f4\u0309 bi\u00ea\u0301n, ke\u0300m theo \u0111o\u0301 la\u0300 nguy c\u01a1 l\u01a1\u0301n v\u00ea\u0300 an toa\u0300n th\u00f4ng tin, nh\u01b0: D\u00ea\u0309 bi\u0323 t\u00e2\u0301n c\u00f4ng pha\u0301 hoa\u0323i va\u0300 ma\u0303 ho\u0301a d\u01b0\u0303 li\u00ea\u0323u. […]<\/p>\n","protected":false},"author":5,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_oasis_is_in_workflow":0,"_oasis_original":0,"footnotes":""},"categories":[15],"tags":[31,65],"class_list":["post-1369","post","type-post","status-publish","format-standard","hentry","category-windows","tag-vpn","tag-windows"],"_links":{"self":[{"href":"https:\/\/longvan.net\/cong-dong\/wp-json\/wp\/v2\/posts\/1369","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/longvan.net\/cong-dong\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/longvan.net\/cong-dong\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/longvan.net\/cong-dong\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/longvan.net\/cong-dong\/wp-json\/wp\/v2\/comments?post=1369"}],"version-history":[{"count":17,"href":"https:\/\/longvan.net\/cong-dong\/wp-json\/wp\/v2\/posts\/1369\/revisions"}],"predecessor-version":[{"id":1435,"href":"https:\/\/longvan.net\/cong-dong\/wp-json\/wp\/v2\/posts\/1369\/revisions\/1435"}],"wp:attachment":[{"href":"https:\/\/longvan.net\/cong-dong\/wp-json\/wp\/v2\/media?parent=1369"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/longvan.net\/cong-dong\/wp-json\/wp\/v2\/categories?post=1369"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/longvan.net\/cong-dong\/wp-json\/wp\/v2\/tags?post=1369"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
- Bi\u1ec3u t\u01b0\u1ee3ng Window –> Setting \u00e0 VPN Setting.
- Sau khi t\u1ea1o user xong ta t\u00ecm v\u00e0 nh\u1ea5n Right-click v\u00e0o user v\u1eeba t\u1ea1o –> Properties –> Tab Dial-In –> Ch\u1ecdn Allow access –> Apply v\u00e0 OK. T\u00f9y ch\u1ecdn cho ph\u00e9p User c\u00f3 th\u1ec3 x\u00e1c th\u1ef1c truy c\u1eadp VPN.
- Ch\u1ecdn Next –> ch\u1ecdn Custom configuration<\/strong>.