VPN Labs vpn questions VPN Forum VPN News
Dr.VPNlabs Discussion Newsletter
 
 Search VPN Topics
 All Categories
 Primers
 VPN, Firewall, Security ...
 Guides
 HowTo, Choosing a VPN ...
 Reference
 Articles, FAQs, Whitepapers ...
 Standards
 Architectures, Protocols ...
 Downloads
 VPN, Firewall, Security ...
 Products & Services
 Hardware, Software, Services
 Organizations
 Business
 Market Research, Law ...
 Forums
 News
 Archive, Events, Newsletters ...
 
VPN labs is an open community for researching, testing, reviewing, and discussing Virtual Private Networks. Get trusted, unbiased advice on just about everything related to VPN. For more detail check: How to use this site. VPN Labs - VIRTUAL PRIVATE NETWORKS - Free VPN Software and Virtual Private Network News.
 
VPN Forum Technical
Topic: HOW TO BYPASS A VPN CONNECTION [New Topic]  [New Reply]
 Author  Message
mike_bradley
Member since:
2002-09-06 12:22:29
  posted: 2002-09-09 05:01:31
How to bypass a VPN connection
----------

I connect to my companies intranet via VPN. However, this severly degrades my non-company connections. I'm using DSL, win2k, no hardware router.

It appears that when VPN is active *all* network traffic goes through the VPN.

Is there some configuration changes or hardware solution to this?

Thanks, -Mike
MikeImp
Member since:
2002-09-11 07:43:02
  posted: 2002-09-11 08:06:17
Split Tunnel
----------
Most likely your company has disabled split tunneling. Depending on your client this is controled by the policy at the head end.
metro305
Member since:
2002-09-12 02:53:48
  posted: 2002-09-12 03:21:15
Client software?
----------
What client software are you using?
mike_bradley
Member since:
2002-09-06 12:22:29
  posted: 2002-09-13 06:33:19
VPN bypass
----------

Hi,

I did check with my companies IT group and they verified that they do disable "split tunnelling" at their end.

I have a win2k machine, connected to Bellsouth DSL, via ethernet.

The VPN client is done through the Windows/Microsoft dial-up properties. We use PPTP (point to point tunnelling protocol). We enable: LCP extentions, software compression, Negotiate multi-link for single link connections.

metro305
Member since:
2002-09-12 02:53:48
  posted: 2002-09-13 12:37:47
OK Try this.
----------
Go to your VPN connection properties. By default it will route all traffic thru your CORP IT network. However you can change this by---

Configure the VPN Client TCP/IP Properties
To disable the Use Default Gateway on Remote Network setting in the VPN dial-up connection item on the client computer:
Double-click My Computer, and then click the Network and Dial-up Connections link.
Right-click the VPN connection that you want to change, and then click Properties.
Click the Networking tab, click Internet Protocol (TCP/IP) in the Components checked are used by this connection list, and then click Properties.
Click Advanced, and then click to clear the Use default gateway on remote network check box.
Click OK, click OK, and then click OK.


Then try to a tracert and ping to confirm path of INTERNET traffic. The a tracert and ping to confirm VPN path a availability - USE IPS not names the firstime.
mike_bradley
Member since:
2002-09-06 12:22:29
  posted: 2002-09-13 18:06:31
VPN Bypass
----------

I actually did try this. Unfortunately,
It somehow prevents the VPN from working.

The VPN connection is made, but I cannot ping/connect to my companies computers.

I'm guessing this would work if my VPN was done through a modem connection.

Or maybe if I had two ethernet cards, both going to the DSL modem? I haven't actually tried this last idea, you think it's worth a try?
mike_bradley
Member since:
2002-09-06 12:22:29
  posted: 2002-09-13 18:07:03
-
----------
-
metro305
Member since:
2002-09-12 02:53:48
  posted: 2002-09-21 23:57:53
No routes mean no internet/VPN
----------
OK so how flexible is your IT department?

The can try this KB to get you to work:
http://support.m icrosoft.com/default.aspx ?scid=kb;en-us;Q317025

I imagine your ping and packets went to the VPN but they could not find a route back?!

About the second NIC I am not sure. Would you give it a valid IP? How would that connect to the VPN?

 
Link to VPNlabs  |  Suggest a Link  |  Contact Us  |  About Us  
 
© 2001 - 2005 VPNlabs.org Disclaimer