Configuring WinGate VPN as a Host

Hosting a WinGate VPN Server requires either a WinGate VPN Server or Advanced Server license.

1. Log on to GateKeeper to access WinGate VPN. Double click the WinGate VPN Monitor (two computers) in your system tray.
   
   

2. Leave the Password field blank if logging into WinGate VPN for the first time. Click OK

3. You will be presented with a Windows alert that you did not specify a password. Click OK

4. Click OK

5. Enter Password for Administrator. Click OK

6. Double Click Add a new VPN from the VPNs hosted window.

7. This presents the VPNs to Host configuration applet. On the General Tab specify a Name and Description for the VPN you wish to host. This is the name other nodes will use to make a connection to this VPN Server.

Local Participation Allows you to specify access level.

No Local Participation Allows remote clients to join this VPN and communicate with each other but disallows access to the VPN host itself

Local Machine Only Allows remote clients to access the VPN host itself but not the network connected to it

Local Network Allows remote clients full access to the network

8. Clicking the X509 Certificate tab will present the following screen. Use this tab to begin generating the certificate for this VPN. This is the standard by which others will identify and authenticate themselves to the host VPN.

Select the Generate Certificate button to proceed

9. Encryption Options

Encryption There are three options in this drop down box

• DES in CBC Mode Allows for quick performance while sacrificing security
• 3DES in EDE CBC Mode Slightly slower performance but increased security
• IDEA in CBC Mode Uses a block cipher with a 128-bit key and is generally considered very secure

Options An exponent is a quantity representing the power to which some other quality is raised. WinGate VPN offers two options

Use 65537 for the exponent

Use 3 for the exponent

Note: There is a trade-off between security and speed. A smaller exponent (in this case 3) means a faster, but less secure operation.

Size This refers to the size of the private key expressed in bits

Passphrase and Confirm Enter a passphrase and confirm, these fields must match. The passphrase is used to decrypt the private key from persistent storage. The longer the passphrase, the more secure.

10. Details of the Certificate Use this screen to enter the details of the certificate.

This is a typical example of the information presented in a VPN Certificate.

Click Next to continue

11. Confirm the details of the certificate.

Click Finish

12. Click OK to generate and process your certificate

13. VPN Configuration. Click Apply

14. Firewall Configuration. The WinGate firewall configuration needs updating to match the service changes. Click Yes to open and/or close the necessary ports

15. System Message You will receive a message on the System Messages tab notifying you The Hosted VPN certificate request has been completed.

16. VPN Configuration. Select the General Tab. The primary purpose of this tab is to identify this node to the VPN server and to define which port numbers to use.

Name Choose a name for your VPN

Description This field can be anything

Control Channel Port This is the port for communication between VPN nodes. The default port is 809

Data Channel Port This is the port that handles network traffic across the VPN. Every node connected to the VPN must have the same ports selected if they are to participate in any exchange of data.

RIP v2 Check this box if you wish to publish routing information onto your LAN using RIP v2. If your client machines have RIP support activated, theyll become aware that you are the gateway for available routes over the VPN.

Click Apply then OK

17. Export Configuration. This is the preferred method of providing VPN Host configuration details to VPN Clients. Select a VPN Host from the VPN Configuration applet. Click Export Config

18. Set the Location of this VPN.

Specify the servers IP address or DNS name. If your servers IP address changes frequently (dynamic IP), we recommend DNS2Go. DNS2Go is a service that associates the name of your computer with its current IP address. Learn more at: https://www.dns2go.com.

19. Save As The VPN export can be saved as a file for later distribution or directly to a floppy disk.

Additional WinGate VPN Setup Guides are available at: https://www.deerfield.com/support/wingate