Please make sure the following requirements are met:
- Windows Vista (please be aware that Microsoft doesn't support Windows Vista anymore and it can't be considered safe due to lacks of security updates)
- A CyberGhost account
Info: Here's how to create a CyberGhost account online
Info: Here's how to manage your CyberGhost account
- A CyberGhost subscription
Info: How to purchase or upgrade a subscription
Info for prepaid subscribers: How to enter an activation key
Visit your CyberGhost VPN online account.
Click on the menu entry 'My Devices' and then on button 'Add Device'.
In the list of Operating Systems you can CyberGhost use with, please click on 'Other' to be able to setup all necessary options for the L2TP protocol. When done the screen extends and gives way to 'Create new credentials'. Do it by clicking on the respective button.
Scroll up the page. As you see, the placeholder for a new device is now replaced by 'Linux, Router, etc.'. Click on that button:
Type a name for your new device and activate the wanted extra features, provided with each regular subscription. These features can be (de)activated later on as well.
Scroll down and generate the login and configuration data for the L2TP protocol. FYI: The Layer 2 Tunneling Protocol (L2TP) allows operations of mutiple tunnels and can be considered as very safe. For authentication it uses PAP/CHAP, but it lacks its own encryption, which is why CyberGhost uses L2TP in connection with the encryption technology IPSec as 'L2TP/IPSec'
- Protocol: Choose the L2TP protocol.
- Country: Since native protocol connections may only be used with exactly one server you now have to choose the country you want to surf from; the server to be used in this country will be chosen by CyberGhost automatically.
- Server group: Depending on the chosen country as well as the availability of different server types as an attribute of your current plan you can also define a server group to use:
Standard and Premium Server: This is the group of all paid service servers of the country chosen.
NoSpy Server: This is the group of all exclusive NoSpy servers of the country chosen. These servers can only be accessed by those subscribers, who opt for them as an additional feature.
After setting up your connection wishes please note down the following data sets. You will need them to configure your device:
- Server: This is the server address of the country you want to surf from, e.g. '1-ro.cg-dialup.net'. The address includes encrypted information about your plan, the server group chosen and the domain name; the protocol to be used will be detected automatically when connecting to CyberGhost. If you want to connect to different locations, you need to adjust the target destination according to a different country and note down that 2nd, 3rd, 4th ... address as well.
- User name: A solely for protocol usage generated user name. This is NOT your regular CyberGhost account user name.
- Password: A solely for protocol usage generated password. This is NOT your regular CyberGhost account password.
- Pre shared secret: For L2TP connections you also need this additional password.
You start your Windows protocol configuration by opening your 'Control Panel' and walk your way via 'Network and Internet' to the 'Network and Sharing Center' or, alternatively, right click on the network symbol in your System Tray and choose the entry 'Network and Sharing Center'.
Click left handed on 'Set up a connection or network'.
Click on 'Connect to a workplace' and 'Next'.
If you already have some active connections, now click on 'Create a new connection'.
If not, choose the option 'Use my Internet connection (VPN)' right away.
Add the server address you want to connect to, e.g. '4-de.cg-dialup.net'. Furthermore type in a name for your new connection in the field 'Destination name'. If you plan to create more connections to different locations make sure, you label each connection thoroughly by adding the country name, eventually the server group, and maybe even the used protocol, e. g. 'CG_DE_Default_L2TP'. That way you better can tell one from another later on.
Activate the check box 'Don't connect now ...' and click on 'Next'.
A protocol connection addresses just one single server. If you want to surf from different locations, aka use different servers in different countries, you need to set up as many connections as locations you want (which means you have to do it all again for each single country). If you want to be able to connect to five different countries, for example, you need to set up five different connections, from which you can choose later on.
Enter your login credentials in the next window, which consist of 1) the user name created in step 1, and 2) the password, also created in step 1. DO NOT use your regular CyberGhost user name and password, which you use to login in the client and your account management!
Click on 'Create' and leave the window by clicking on 'Close'. Don't connect now, because there are some other settings to be set first.
Again, open your 'Network and Sharing Center' (e. g. via 'Network and Internet > Connect to a Network'). Click on 'Manage network connections' in the left side bar.
Right click on the connection you just created and choose 'Properties' from the context menu.
In the 'General' tab you see the server address you entered before.
Switch to the tab 'Options', deactivate 'Include Windows logon domain', leave all other settings as found and click on 'PPP Settings'. There you make sure, only the check box 'Enable LCP Extensions' is activated.
Now switch to the tab 'Security', activate the radio button 'Advanced (custom settings)' and click on 'Settings'. There you activate as the wanted type of 'Data Encryption' the value 'Maximum strength encryption', which equals 256 Bit AES. Furthermore activate the option 'Allow these protocols' and put a mark in the box to 'Microsoft CHAP Version 2'.
For media streaming it might be necessary to choose 'Require encryption', which equals 128 Bit AES (the 'Maximum' encryption puts more load on your CPU and might result in video jolting).
Confirm by clicking on 'OK' and move to the tab 'Networking'. There you activate the option 'L2TP IPSec VPN' as the 'Type of VPN'. Also please click on the button 'IPSec Settings' and activate the option 'Use preshared key for authentication'. Enter 'CyberGhost' (case sensitive!).
Confirm with 'OK' and 'OK' and return to the connection list.
Optional: Tell Windows to create a link to this connection on your desktop by right clicking on the respective connection and choosing the entry 'Create Shortcut' from the context menu.
Start your new connection with a double click.
Enter your credentials again, that is the user name and the password generated in step 1. DO NOT use your regular CyberGhost password.
Also tell Windows to save your credentials so you don't have to type them any time you want to connect.
Click on 'Connect'. Once connected for the first time you will be asked for a location for the new network. Choose the entry 'Public location'.
To disconnect, right click on the network icon in your System Tray and choose 'Disconnect from ... > your active connection'.
Certain routers need you to activate the L2TP/IPSec protocol in order to establish working connections. How you can accomplish that task should be documented in your router's manual.