Downloads and Guides: Install (Setup) L2TP Native VPN for Windows Vista/7

Users who cannot connect to Cisco AnyConnect, the University of Minnesota's recommended VPN client, can connect via the built-in ("native") VPN client. This article will assist you in creating and configuring the University of Minnesota (UMN)'s L2TP Native VPN for Windows 7. To view instructions for connecting with Windows 10, see our Install L2TP Native VPN for Windows 10 article.

Create UMN L2TP Native VPN Connection

Before setting more specific VPN configurations, we need to set up the UMN L2TP Native VPN connection.

1. Navigate to Network and Sharing Center.
   •  > Control Panel > Network and Internet > Network and Sharing Center
2. Click Set up a connection or network.
   
3. Select Connect to a workplace, then click Next.
   
4. Select Use my Internet connection (VPN).
5. Type nct.vpn.umn.edu in the Internet address or domain field ("nct" stands for Native-Client-Termination).
6. Type UMN L2TP Native VPN or other preferred name in Destination name field.
   • Check Allow other people to use this connection if desired.
   • Check Don’t connect now; just set it up so I can connect later, then click next.
7. Enter your Internet ID and password.
   • NOTE: You can leave these fields blank. The user interface will ask for them when you connect.
8. Click Create.
9. Click Close when the user interface says "The connection is ready to use." 
10. If prompted, don't attempt to connect yet as additional configurations are required.

Configure L2TP⁄IPSec Attributes for UMN L2TP Native VPN

Now we can define the attributes specific to the University's central VPN service.

1. Navigate to Network and Sharing Center.
   •  > Control Panel > Network and Internet > Network and Sharing Center
2. Click Connect to a network.
   
3. Right-click UMN L2TP Native VPN (or whichever name was created for the UMN VPN connection), then select Connection Properties.
4. Click the Security tab.
   
5. Click the Advanced Settings button.
6. Click IPsec tab.
   • Select L2TP if IPsec is unavailable.
7. Select Use preshared key for authentication.
8. Type S3cur1ty! in Key field.
9. Click OK.
10. Keep default settings for remaining items in Properties menu. 
    • Data encryption: Require encryption (disconnect if server declines)
    • Authentication: Allow these protocols
      • Challenge Handshake Authentication Protocol (CHAP)
      • Microsoft CHAP Version 2 (MS-CHAP v2)
    • Do NOT check "Automatically use my Windows logon name and password" unless these are the same as UMN credentials

For assistance following these steps, please contact Technology Help.