Hardware manual

Appendix B Setup Example 71
Step 8: Set up VPN service
1 In Server Admin, select VPN in the Computers & Services list.
2 Click Settings.
3 Enable L2TP over IPSec (Layer Two Tunneling Protocol, Secure Internet Protocol) for
Mac OS X version 10.4 computer users, Linux or UNIX workstation users, and Windows
XP users. While PPTP, described in the next step, can also be used, L2TP provides the
greatest security because it runs over IPSec.
Enter a starting and ending IP address to indicate which addresses the VPN server can
assign to clients. Avoid addresses the DHCP server is set up to serve. Also avoid
addresses you specify if you enable PPTP.
Specify the shared secret by typing a string in “Shared secret”. Enter a string that isn’t
intuitive. For example, specify digits, symbols, and uppercase and lowercase characters
in unusual combinations. The recommended string length is 8 to 12 characters.
4 Enable PPTP (Point to Point Tunneling Protocol) if employees will need to access the
intranet from Windows workstations other than Windows XP computers or from
Mac OS X version 10.2 computers when they’re away from the office. If you need to
support older Windows clients that don’t have 128-bit PPTP support, select “Allow
40-bit encryption keys in addition to 128-bit”.
Enter a starting and ending IP address to indicate which addresses the VPN server can
assign to clients. Avoid addresses the DHCP server is set up to serve. Also avoid
addresses you specified when you enabled L2TP over IPSec.
5 Click Save, then click Start Service.
Step 9: Set up productivity services
The infrastructure you need to set up file, print, and other productivity services is now
available. Follow the instructions in the relevant administration guides, listed on
page 11, to configure the services of interest. Many services, such as Apple file service,
require minimal setup. Simply start them using Server Admin.
Step 10: Create user accounts and home directories
1 Open Workgroup Manager. The Open Directory master LDAP directory is automatically
available for editing. You’ll add an account for each employee to this master directory.
2 Click the New User button.
3 Specify user settings in the panes that appear.
The user management guide tells you how to set up all the user account attributes,
including home directories. It also describes how to manage users by setting up group
accounts and computer lists and how to set up preference settings that customize the
work environments of Macintosh clients.