"Marcin" <Mar...@discussions.microsoft.com> wrote in message news:4EA2E740-4E8C-46B6...@microsoft.com...I have vpn server (Windows 2003 with RRAS) with 2 NICs.
First NIC is connected to LAN and second to internet.
I have also 2 internet connections with 2 routers.
First connection is only for vpn access (connected to public NIC on my VPN
Second connection is used for internet access (http, ftp,...) and it is
connected to my LAN.
Whan I connect to VPN server I have no acces to internet. I don't want to
disable 'use default gateway....' on my vpn client. I don't want also to use
my internet connection on VPN server for internet access.
I would like to set routing for vpn client so they use second router to
I know that I can set routing on RRAS, but how to set default gateway only
for vpn clients?
I can't think of any way to get your VPN client to use the LAN router.
For VPN to work, the VPN server's default route must point out to the
internet through the public NIC. For internet access through the other
router to work, its default route would need to be pointing to the LAN
router via the LAN NIC. There is no way to satisfy both of these
requirements at the same time.
I know what IP address is assigned to vpn client by vpn server, I don't
need to know what public IP they have. Based on this information I can say
"route packets from IP pool assigned by vpn server to LAN gateway" (this
should be configured on vpn server). Public IP addresses are still routed by
gateway assigned to NIC connected to internet.
It should work, but I haven't tools on Windows to do it.
(Cisco has 'Police based routing' - with this feature you can set routing
based on source address).
Are you using the IPSec VPN client? If yes, the packet will be encrypted and
encapsulated in a packet with destination IP address being the one of the VPN
server. In theory the OS will only know about the packet is sending to the
VPN server (not other internet ip address used in the VPN). Therefore you can
just add a route to the ip address of the VPN server via your preferred
gateway, leaving the default gateway be the one you use to access the