RE: Problem accessing local resources with Nortel VPN active

From: Wes (Wes_at_discussions.microsoft.com)
Date: 10/21/04 

Date: Thu, 21 Oct 2004 16:39:01 -0700

The route table gets modified with entries from the Nortel VPN server you
are connecting to, the server adds relevant entries for your VPN. The metric
doesn't mean much. The destination IP network number is derived from the
destination IP address and the network number is checked against the route
table. A match will determine which gateway the packet will be sent to. If
there are no matches then the default route is chosen and the packet is send
to the default gateway.
So, long story short, the metric isn't the problem. However the default
route and gateway entries should not be changed. I would check the entry in
your client properties and see if you have split horizon turned off. If it's
off then the client will send default packets back to your VPN where they
will be routed. Normally you don't want your internet traffic back-hauled
to your VPN, but your network management may want more security, you'll have
to check with them to find out the proper config for your client.

"Pat McDonald" wrote:

>
> Just as further info ... when doing a route print .. it appears that
> after connecting to the VPN, the metric on the local network moves up
> to 20 while the VPN network metric goes down to a 1 ... hence the
> problem.
>
> I tried changing the interface metric on the network adapter (Advanced
> properties on TCP/IP) to 1 and that does not change the behaviour.
>
> Ideas?
>
> Pat McDonald Wrote:
> > I am having a problem with my Nortel VPN client.
> > It would appear that when I connect the VPN, the default gateway and in
> > fact the default network is changed to that of the VPN. This has the
> > effect of denying my acces to local network (private network)
> > resources.
> >
> > I cannot seem to find anywhere to change this behaviour.
> >
> > When I was on Win2k I did not seem to have this problem.
> >
> > Thanks for any help ...
> > PM
>
>
> --
> Pat McDonald
>

Relevant Pages

  • Re: VPN and XP SP2 woes
    ... I connected VPN, default gateway box Checked, and got a route print. ... Nothing is going over my VPN connection. ... >>> traffic in to the corporate network. ...
    (microsoft.public.windowsxp.help_and_support)
  • OT: RRAS doesnt R
    ... A remote user now needs access to our network. ... She needs to connect via VPN ... Our office is only one subnet. ... Here's the routing table from a "route print" done on Dataman, ...
    (microsoft.public.cert.exam.mcse)
  • Re: Problem with route add and VPN
    ... here is what i am tying to access the destination network: ... the vpn connection is disconnected and reconnected. ... When I add the route it will only add sucessfully if I specify the ...
    (microsoft.public.win2000.ras_routing)
  • Re: OT: RRAS doesnt R
    ... using a VPN. ... A remote user now needs access to our network. ... Our office is only one subnet. ... Here's the routing table from a "route print" done on Dataman, ...
    (microsoft.public.cert.exam.mcse)
  • Re: VPN Routing Problem
    ... "route print" showed the absence of any path for 172.16.200.0 traffic, which of course is why it was getting routed through the default gateway. ... Of course, when the VPN Server decides to allocate a different IP address to the client, I wonder if the route will once more fail? ... I can't put IP reservations onto the DCHP server associated with the VPN service, so can only influence the range of IP addresses given. ...
    (alt.os.windows-xp)