Automate VPN connection creation

I would like to have a script or a batch file that users can run on their home machines to create a VPN connection for dialing in to the office, then another to open the connection.

Does anyone know if this can be achieved?

Thanks

 

I've had a hunt round and I can't find an easy solution. You need to create a script that will talk to RASAPI32.DLL. Some information about the API can be found here:

http://msdn2.microsoft.com/en-us/library/ms764032.aspx

And there is an example of using it in Python here:

http://mail.python.org/pipermail/python-list/2001-March/075594.html

What are you trying to do? What services do your users need to access?

Some hardware firewalls will supply VPN client software that you can then configure and send out to remote users. For example, here are the instructions for using the WatchGuard VPN client. If you need VPN tunnels that's a route I can recommend.

However, if you only need to allow access to a few network services (an intranet for example) secure sockets may be an easier way to go. Have a look at this review of a NetGear SSL device.

 

Yep Reggie I didn't find much either.

Another option (while not scripted or automated) my be easier to be set up by a user from their home.

hamachi
https://secure.logmein.com/products/hamachi/advantages.asp

The above and things like them are second choice for me.

I would have the user allow me to RDP or VNC to their home computer and set up a native VPN, that is unless you have a very large number to connect.

Bob

 

The problem with using VNC or RDP that way is you've then opened those ports to attack. The last thing you want is to have a remote desktop vulerability to manage.

 

He is going to have to do it some way.

Or go to the users home??!!

Or talk them thru it on the phone! Yuck!

RDP and VNC can be used to set up the VPN then be deactivated.

This is what they are for.

A home user almost never needs them but Corperate America uses them by the millions accepting the risk (using more security) because they get the job done. And in some cases is the only way.

Bob

 

Windows Server System at the office? The Connection Manager Administration Kit from MS will allow you to create a service profile file to run on a client machine, that will configure the connection and necessary protocols for that user.