这里是我为大家写的L2TP 证书×××连接。
windows server2008r2通过配置L2TP ×××连接的证书,管理员可以使用证书来建立IPSec加密通道,完成×××连接。
![wind server2008R2 L2TPvpn证书连接_windows 2008](https://s2.51cto.com/attachment/201209/195011298.png?x-oss-process=image/resize,m_fixed,w_1184)
1、 第一步:把相关网络地址设置好,然后把192.168.1.100设为域服务器,中间这台服务器就是我们的×××。要加入AD域当中。客户端就是202.96.134.101这台。
2、 第二步,在两台服务器把路由服务安装起来,打开服务器管理器----添加角色向导---网络策略和访问服务---路由和远程访问服务选中,然后安装就行了。两台服务器同样的安装。
3、 第三步:我们给DC服务器安装证书服务,添加证书服务和刚才添加网络策略一样方法进行添加。 在添加过程中,你可以根据自己的一些应用来添加。
4、 第四步:这时我们就可以配置证书服务了,如以下图,打开运行---输入MMC打开控制台进行设置。
![wind server2008R2 L2TPvpn证书连接_windows 2008_02](https://s2.51cto.com/attachment/201209/195114798.png?x-oss-process=image/resize,m_fixed,w_1184)
![wind server2008R2 L2TPvpn证书连接_windows 2008_03](https://s2.51cto.com/attachment/201209/195134137.png?x-oss-process=image/resize,m_fixed,w_1184)
![wind server2008R2 L2TPvpn证书连接_windows 2008_04](https://s2.51cto.com/attachment/201209/195225540.png?x-oss-process=image/resize,m_fixed,w_1184)
![wind server2008R2 L2TPvpn证书连接_windows 2008_05](https://s2.51cto.com/attachment/201209/195245557.png?x-oss-process=image/resize,m_fixed,w_1184)
第五步:我们把证书导出来
![wind server2008R2 L2TPvpn证书连接_windows 2008_06](https://s2.51cto.com/attachment/201209/195326826.png?x-oss-process=image/resize,m_fixed,w_1184)
![wind server2008R2 L2TPvpn证书连接_windows 2008_07](https://s2.51cto.com/attachment/201209/195407380.png?x-oss-process=image/resize,m_fixed,w_1184)
![wind server2008R2 L2TPvpn证书连接_windows 2008_08](https://s2.51cto.com/attachment/201209/195423199.jpg?x-oss-process=image/resize,m_fixed,w_1184)
导出完成即可。
6、第六步;我们打开证书颁发机构。进行证书模板配置
![wind server2008R2 L2TPvpn证书连接_windows 2008_09](https://s2.51cto.com/attachment/201209/195539826.png?x-oss-process=image/resize,m_fixed,w_1184)
找到工作站身份验证
![wind server2008R2 L2TPvpn证书连接_windows 2008_10](https://s2.51cto.com/attachment/201209/195641680.png?x-oss-process=image/resize,m_fixed,w_1184)
![wind server2008R2 L2TPvpn证书连接_windows 2008_11](https://s2.51cto.com/attachment/201209/195759318.jpg?x-oss-process=image/resize,m_fixed,w_1184)
7、 第七步;在次选中证书模板,新建 证书模板
![wind server2008R2 L2TPvpn证书连接_windows 2008_13](https://s2.51cto.com/attachment/201209/200449429.png?x-oss-process=image/resize,m_fixed,w_1184)
8、 第八步:打开远程访问的功能,配置×××
![wind server2008R2 L2TPvpn证书连接_windows 2008_14](https://s2.51cto.com/attachment/201209/200320853.jpg?x-oss-process=image/resize,m_fixed,w_1184)
![wind server2008R2 L2TPvpn证书连接_windows 2008_15](https://s2.51cto.com/attachment/201209/200545523.png?x-oss-process=image/resize,m_fixed,w_1184)
![wind server2008R2 L2TPvpn证书连接_windows 2008_19](https://s2.51cto.com/attachment/201209/200644842.jpg?x-oss-process=image/resize,m_fixed,w_1184)
![wind server2008R2 L2TPvpn证书连接_windows 2008_23](https://s2.51cto.com/attachment/201209/200858172.jpg?x-oss-process=image/resize,m_fixed,w_1184)
9、 第九步:在×××服务器上注册证书
![wind server2008R2 L2TPvpn证书连接_windows 2008_27](https://s2.51cto.com/attachment/201209/201331405.jpg?x-oss-process=image/resize,m_fixed,w_1184)
![wind server2008R2 L2TPvpn证书连接_windows 2008_31](https://s2.51cto.com/attachment/201209/201557107.jpg?x-oss-process=image/resize,m_fixed,w_1184)
![wind server2008R2 L2TPvpn证书连接_windows 2008_32](https://s2.51cto.com/attachment/201209/201642688.jpg?x-oss-process=image/resize,m_fixed,w_1184)
在这里说明一下,导出时选导出私钥,需要设置密码。
![wind server2008R2 L2TPvpn证书连接_windows 2008_33](https://s2.51cto.com/attachment/201209/201702697.jpg?x-oss-process=image/resize,m_fixed,w_1184)
10、第十步:我们现在要去客户端上了,登录客户端,我们首先要做的是把服务器上两个证书拷过来。
![wind server2008R2 L2TPvpn证书连接_windows 2008_34](https://s2.51cto.com/attachment/201209/201826870.jpg?x-oss-process=image/resize,m_fixed,w_1184)
![wind server2008R2 L2TPvpn证书连接_windows 2008_35](https://s2.51cto.com/attachment/201209/201847456.jpg?x-oss-process=image/resize,m_fixed,w_1184)
把CA证书导入完成后,我们现在往上面个人那里,把名为SHI个人证书也导入进来
![wind server2008R2 L2TPvpn证书连接_windows 2008_36](https://s2.51cto.com/attachment/201209/202123231.jpg?x-oss-process=image/resize,m_fixed,w_1184)
![wind server2008R2 L2TPvpn证书连接_windows 2008_38](https://s2.51cto.com/attachment/201209/202203990.jpg?x-oss-process=image/resize,m_fixed,w_1184)
11、 第十一步,我们在系统文件中找到hosts文件,把里机添加一条记录
![wind server2008R2 L2TPvpn证书连接_windows 2008_42](https://s2.51cto.com/attachment/201209/202401182.jpg?x-oss-process=image/resize,m_fixed,w_1184)