How do You Vpn out after you are connected with a VPN connection?

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

I have a Win2k Server and employees VPN from offsite. Everything works but
from a VPN connection offsite You can't VPN into other sites. From My office
You can VPN into the server and VPN out. I have DSL modem connected to a
router with a static IP. Without this working each offsite computer needs to
be setup to VPN into our client sites rather than just have 1 setup on our
server. When You try to VPN out from offsite You lockup and lose your VPN
connection to Our server
Is there a way to VPN into a server and then VPN out to connect elsewhere?
Thanks
Bob
 
BobT said:
I have a Win2k Server and employees VPN from offsite. Everything
works but from a VPN connection offsite You can't VPN into other
sites. From My office You can VPN into the server and VPN out. I have
DSL modem connected to a router with a static IP. Without this
working each offsite computer needs to be setup to VPN into our
client sites rather than just have 1 setup on our server. When You
try to VPN out from offsite You lockup and lose your VPN connection
to Our server
Is there a way to VPN into a server and then VPN out to connect
elsewhere? Thanks
Bob
Click to expand...

The reason this happens is because of the way the routing works on the
VPN client. When a VPN connection is made, the default option is to make the
VPN connection the default gateway for the machine.

When a VPN client connects to your system, all traffic is directed to
you across the VPN link. If the client then connects to a different VPN
server at another site, this changes. The new connection becomes the default
gateway.

The first thing to try is to clear the "Use default gateway.." box in
the client's connection properties. This should leave their default route to
the Internet active and just set up a subnet route for the VPN connections.
(However this will fail if your office and a client site use the same IP
subnet. There are also problems with 10.0.0.0 addresses).

For more detail on how this works see KB 254231 .
 
Back
Top