How do I set up the Astaro Security Gateway to use AuthAnvil Two Factor Auth to authenticate PPTP VPN connections?

Configuring Astaro Security Gateway to Support RADIUS Authentication for PPTP Connections

1. Sign into your Astaro Security Gateway WebAdmin console as an administrator.
2. Click on ‘Users’, then ‘Authentication’, then the ‘Servers’ tab.
   
3. Click ‘New Server’.
4. Select ‘RADIUS’ from the ‘Backend’ dropdown.
5. Click the plus sign beside the ‘Server’ field and fill in the required server information in the ‘Add Network Definition’ box.
6. Step 6 – Set your RADIUS server port and shared secret, and optionally test the RADIUS server connection and an AuthAnvil Two Factor Auth authentication.
7. Click ‘Save’.
8. If a group does not already exist for RADIUS users, click ‘Users’ then ‘Groups’, and click‘New Group’. Give the group a name, set the ‘Group Type’ to ‘Backend membership’, and set the ‘Backend’ to ‘RADIUS’, then click ‘Save’.
9. Click ‘Remote Access’ then ‘PPTP’ and click on the ‘Global’ tab. Enable PPTP if required.
10. Set the ‘Authentication via’ dropdown menu to read ‘RADIUS’.
11. Click ‘Apply’.
12. Configure your PPTP client using the steps below and authenticate to the VPN using your AuthAnvil Two Factor Auth username and passcode.

Configuring the PPTP VPN Client for Windows XP
Note: As of April 8, 2014 Windows XP is no longer being supported.

First you will need to ensure your VPN connection is set to require MSCHAP2. You can do so by following these steps:

1. Double click on the VPN connection and go to ‘Properties’, then ‘Options”. Ensure‘Include logon domain’ is unchecked.
2. Go to the Security tab, set the ‘‘Security Options’ to ‘Advanced’ and click the‘Settings’ button.
3. Ensure that ‘Data Encryption’ is set to ‘Require data encryption’, and that under‘Allow these protocols’, only the ‘MS-CHAP v2′ check box is enabled and click ‘OK’, then click‘OK’ again.
4. Enter the username into the ‘Username’ field and the AuthAnvil Two Factor Auth passcode (PIN + OTP) into the ‘Password’ field. Click “Connect” to establish a VPN connection using strong authentication.

 
 
Configuring the PPTP VPN Client for Windows Vista/7
First you will need to ensure your VPN connection is set to require MSCHAP2. You can do so by following these steps:

1. Double click on the VPN connection and go to ‘Properties’, then ‘Options”. Ensure‘Include logon domain’ is unchecked.
2. Go to the Security tab and ensure that the ‘Type of VPN’ is set to ‘PPTP’ selected, and‘Data Encryption’ is set to ‘Require data encryption’, and that under ‘Allow these protocols’, only the ‘MS-CHAP v2′ check box is enabled and click ‘OK’.
3. Enter the username into the ‘Username’ field and the AuthAnvil Two Factor Auth passcode (PIN + OTP) into the ‘Password’ field. Click “Connect” to establish a VPN connection using strong authentication.

Questions?

If you have any questions or need some help, we would be happy to assist. Open a case at help.scorpionsoft.com or send an email to support@scorpionsoft.com.