Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations strongm on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

cannot surf Internet after VPN connection

Status
Not open for further replies.

Guest_imported

New member
Jan 1, 1970
0
Hi,
I having a problem with accessing the Internet once I'm connected to the VPN server. I can see the entire LAN but unable to access the Internet. I'm using MS VPN on Win2k.
I even called MS support and they recommended not to use the default gateway of the VPN client and set persistent static of all the LAN's subnet with a static VPN IP address instead of DHCP from the VPN server.
This seems to work for a small number of user. This will be a nightmare if I have to administor hundreds of users with static VPN IP address and static route on their remote PC.
Is there a fix to this where a user log on and gets assigned an IP address, gateway, etc and surf the Internet at the same time?

THanks
Patrick
 
Go to the properties of the VPN connection and uncheck the box that says use gateway on remote network. That usually fixes the problem, because it thinks you are trying to go out that gateway which actually is unvailable due your VPN connection.
 
Unticking the use default gateway allows me to access resources that are the same subnet as the VPN server's internal NIC only.
I have 3 to 4 subnet that are routed by a router inside the network. If I ticked the Use Default Gateway on Remote Network in the VPN client setting, I can see all the reouted subnet but can't surf the web. What's strange is my internal DNS will help me resolve Internet domain names but I cannot be routed to the outside world. Is it possible to configure the client for split-tunneling???
 
Are you sure your remote client has the correct proxy settings for the web browser ? most home pc's won't be configured for the .corp proxy server..

I believe that split tunneling is only setup on the server side.
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top