1. create a site and set it up:
2. Enable public access for the petstore site
3. Enable Apex classes access
4. Enable Visual Force pages access
5. Enable Custom Objects access
6. Enable Field-Level-Security, make sure all fields are visiable
-- Download Setup a petstore force.com site as PDF --