Published 2023-01-18 by TechNet New England
A VPN (Virtual Private Network) creates a secure, encrypted connection between your computer and your organization's network. This allows you to access files, servers, and applications as if you were in the office. Windows 11 has a built-in VPN client that supports several protocols. This guide covers how to set it up. ## Before You Start You need the following information from your IT provider: **VPN server address**: The hostname or IP address of the VPN server (for example, vpn.yourcompany.com or 203.0.113.50). **VPN type**: The protocol being used (IKEv2, L2TP/IPsec, PPTP, or SSTP). **Sign-in info**: Your username and password, or whether a certificate is used. **Pre-shared key** (if using L2TP/IPsec): A shared secret that your IT provider will give you. If your organization uses a third-party VPN client (such as Fortinet FortiClient, Cisco AnyConnect, Palo Alto GlobalProtect, or OpenVPN), follow the setup instructions from your IT provider for that specific client instead of these steps. ## Setting Up the Built-in Windows VPN 1. Open **Settings** (Win + I). 2. Go to **Network and internet > VPN**. 3. Click **Add VPN**. 4. Fill in the fields: **VPN provider**: Select "Windows (built-in)." **Connection name**: Give it a friendly name (like "Office VPN"). **Server name or address**: Enter the server address from your IT provider. **VPN type**: Select the protocol your IT provider specified. If unsure, try "Automatic." **Type of sign-in info**: Usually "Username and password." **Username and Password**: Enter your credentials. 5. Click **Save**. ## Connecting to the VPN 1. Click the **network icon** in the system tray (bottom right of the taskbar). 2. Click **VPN**. 3. Select your VPN connection and click **Connect**. 4. If prompted, enter your username and password. 5. Once connected, you will see "Connected" under the VPN name. You can also connect from **Settings > Network and internet > VPN**. ## Disconnecting Click the network icon in the system tray, click VPN, and click **Disconnect**. ## Troubleshooting **"The remote connection was not made because the attempted VPN tunnels failed":** Check that the VPN type (protocol) matches what your IT provider specified. Also verify the server address is correct. **"The L2TP connection attempt failed because the security layer encountered a processing error":** This usually means the pre-shared key is wrong. Double-check it with your IT provider. **Connected but cannot access resources:** You may be connected to the VPN but traffic is not routing through it. Check with your IT provider whether split tunneling is configured and whether you need to access resources by IP address instead of name. **MFA prompt not appearing:** If your VPN requires multi-factor authentication, make sure the authenticator app is set up. Some VPN configurations require you to append the MFA code to your password. ## Third-Party VPN Clients Many organizations use dedicated VPN applications instead of the Windows built-in client: **Fortinet FortiClient**: Download from your IT provider or forticlient.com. **Cisco AnyConnect**: Usually installed by your IT team or available at your organization's VPN portal URL. **Palo Alto GlobalProtect**: Download from the portal URL provided by IT. **WireGuard**: Available from wireguard.com. Follow your IT provider's specific instructions for these clients, as each has its own configuration process.