How to Configure Unifi UDM PRO VPN for Windows 10

In this tutorial I will show you how to configure the Unifi UDM Pro VPN for Windows 10. I will take you through the processes of configuring a VPN User and VPN VLAN on the Unifi controller version 6.1.71 of the UDM Pro and then finishing with configuring the Windows VPN client.

 

Once your logged into your UDM PRO follow these steps below.

  1.  Click on Settings
  2. Click on Advanced Features
  3. Scroll Down to Radius
  4. Locate Default Radius server. On the right hand side click on the dot burger and click Configure.
  5. Once the page loads flip the switch to blue.
  6. Type in the secret. You can use my simple password generator to create one. 
  7. No need to change anything in RADIUS Settings section.
  8. Expand RADIUS Users.
  9.  Click on Create New RADIUS User

  10. Fill out the form. Type in a VLAN ID that you will want to use. In my case it will be VLAN ID 25. We will configure this VPN VLAN in a moment.
  11. Select drop down for Tunnel Type and select: 3 – Layer Two Tunneling Protocol (L2TP)
  12. Select drop down for Tunnel Medium Type and select: 1 – IPv4 (IP version 4)
  13. Click the blue [Create User] button.
  14. Click the blue [Apply Changes] button at the bottom to save everything.
  15. Now we are ready to move onto creating the VPN Network!
  16. Click on Settings
  17. Click on Networks

  18. Click on Add New Network Button
  19. Give your new network a name, EX: VPN.
  20. Expand VPN Settings, afterwards click dropdown and select Remote user.
  21. Enter a Pre-Shared Key. End users will need to use this key as well.
  22. Lets move onto Gateway/Subnet. My personal preference is to match the third octet with the VLAN ID number. In my case I am using VLAN ID 25 so I would change my Subnet to 192.168.25.1/24.

  23. Change your IP pool range to accommodate your users.
  24. Skip steps 25 and 26 if you do not have Internal DNS server \ Domain Controller.
  25. If you have an Internal DNS server \ Domain Controller you will want to change the Name Server. Click the drop down, change Auto to Manual.
  26. Enter only the IP addresses of your Internal DNS server \ Domain Controller.
  27. Now your Finished Click the blue [ Add Network ] button to save everything.
  28. you can now setup the VPN connection on your Windows 10 computer with the credentials you have created. 

Note: By default all network VLAN’s communicate with each other. 

How to configure Windows VPN Client

  1. On your Windows 10 Search Bar, search for vpn.
  2. Click on VPN settings.
  3. Once the VPN window is open click on Add a VPN connection. 
  4. Afterwards fill out the information you created on the UDM Pro during the VPN user setup. I high lighted in red what needs to be selected in the drop down windows.
  5. Now you can successfully Connect to your VPN.

If you are getting the error “The connection was prevented because of a policy configured on your RAS/VPN server.” Click Here: How To Resolve Unifi VPN Access RAS/VPN Server Error for Windows 10

Leave a Reply