2 NIC and VPN connections

[Guest]

I use VPN trought internet to connect to my principal office, this computer
is the mailserver for the other users. When VPN is active, the other users
can't connect to mailserver because VPN connection needs use Gateway of
remote network.

I added second NIC to resolve this problem, but how I can tell to VPN "use
NIC 1 (or NIC 2) to connect to my principal office", and permit to
mailservers users continue sending/receiving e-mails?

Thanks for your help!

Simon

 

[Frank in Atlanta]

I would be shocked if your VPN would even allow this -- it would defeat the
security of your VPN.

I would expect that when you connect through your VPN, it will disable all
other network connections (your 2nd card). If it were to allow a local
network to connect to your computer while being connected through the VPN,
it creates a nice security hole where outsiders could get into your VPN via
your computer. Even if you don't bridge the connections yourself, an
attacker could. Set up a dedicated server for the other uses to access for
mail, etc...or have everyone connect in via VPN to your main office, and get
to a server there, or back out to your server that way.

 

[Lanwench [MVP - Exchange]]

In

I use VPN trought internet to connect to my principal office, this
computer is the mailserver for the other users. When VPN is active,
the other users can't connect to mailserver because VPN connection
needs use Gateway of remote network.

I added second NIC to resolve this problem, but how I can tell to VPN
"use NIC 1 (or NIC 2) to connect to my principal office", and permit
to mailservers users continue sending/receiving e-mails?

Thanks for your help!

Simon

Not sure I understand. You're logging into your mail server locally and
using a VPN client on it to connect to another office? If so, bad idea. Get
rid of the other NIC, don't do this on your server at all. Let your server
be a server. Get a workstation for this purpose, or set up a site link VPN
between two compatible routers/firewalls, so that the two *networks* are
connected, without a client needed on any computer.

If I've misunderstood, please correct me.

 

[Guest]

Hi:

Thanks for your help, I will clarify:

My machine is actually mailserver for other computers. We have 3 different
VPN connections 1 of them block internet connection and 2 allow it. The
connection that block internet is faster.

To allow internet connection I need unset "Use Gateway of Remote Network",
but if I unset this value for the faster VPN, don't work at the same speed.

My idea is use 1 nic for mailserver and 1 nic for VPN. For Security is not
a problem because this machine is connected to a firewall that provide NAT.
Both card will have address like 192.X.X.X.

VPN will block both card when connected? I think that when I have connected
both cards the route table will be modified and will let the outgoing traffic.

I will let you know.