on windowsXP you can change the option "Use default gateway on remote
network" by going to VPNproperties , Networking , Internet protocoltcp/ip ,
Advanced .
there you can remove the checkmark and you can use the VPN only to access
the ips inside that network. the rest of the traffic goes thru the internet
as you would normaly use.
On 5/31/06, Marty Meyers <mmeyers@rackspace.com> wrote:
As far as I know you can't do "split-tunneling" on a PPTP connection.
Here is a FAQ from Cisco's site:
Q. I think I have a split tunneling issue. What should I do when a PPTP
tunnel comes up on a PC, the PPTP router has a higher metric than the
previous default, and I lose connectivity?
A. Run a batch file (batch.bat) to modify the Microsoft routing to
resolve this problem. Delete the default and reinstall the default route
(you must know the IP address that the PPTP client was assigned, such as
192.168.1.1).
In this example, the network inside the router is 10.13.1.x.
route delete 0.0.0.0
route add 0.0.0.0 mask 0.0.0.0 161.44.17.1 metric 1
route add 10.13.1.0 mask 255.255.255.0 192.168.1.1 metric 1
Marty
Richard Sammet wrote:
> take a look at your split tunneling configuration...
> (google -> vpn split tunneling)
>
> br,
> richard
>
>
> Imran Imtiaz wrote:
>
>> why i can't browse the internet while i am connected to my vpn server
(pix
>> 501 (6.3)) ?
>>
>> following is the configuration of my pix 501 firewall acting as a vpn
>> serverpixfirewall(config)# show vpdn group
>> vpdn group PPTP-VPDN-GROUP accept dialin pptp
>> vpdn group PPTP-VPDN-GROUP ppp authentication pap
>> vpdn group PPTP-VPDN-GROUP ppp authentication chap
>> vpdn group PPTP-VPDN-GROUP ppp authentication mschap
>> vpdn group PPTP-VPDN-GROUP ppp encryption mppe auto
>> vpdn group PPTP-VPDN-GROUP client configuration address local mypool
>> vpdn group PPTP-VPDN-GROUP client configuration dns proxy-server
>> 202.59.90.17
>> vpdn group PPTP-VPDN-GROUP pptp echo 60
>> vpdn group PPTP-VPDN-GROUP client authentication local
>>
>> pixfirewall(config)# show access-list
>> access-list cached ACL log flows: total 0, denied 0 (deny-flow-max 256)
>> alert-interval 300
>> access-list acl_out; 3 elements
>> access-list acl_out line 1 permit tcp any any (hitcnt=7993)
>> access-list acl_out line 2 permit udp any any (hitcnt=3242)
>> access-list acl_out line 3 permit icmp any any (hitcnt=2983)
>> access-list acl_in; 3 elements
>> access-list acl_in line 1 permit tcp any any (hitcnt=46965)
>> access-list acl_in line 2 permit udp any any (hitcnt=53319)
>> access-list acl_in line 3 permit icmp any any (hitcnt=3529)
>> access-list inside_outbound_nat0_acl; 1 elements
>> access-list inside_outbound_nat0_acl line 1 permit ip any 192.168.0.240
>> 255.255.255.240 (hitcnt=3530)
>>
>>
>
>
