RAS client uses wrong connection??

[Casper]

When I dial in from my W2K laptop to my RAS server (both sides use modems),
and, once connected, create a VPN connection to the RAS server, I noticed
that all traffic is sent to the RAS server over the dial-up connection. So
no security, even though I have a VPN line open. Since both lines use the
same IP range, I can't differentiate on IP address.

Can anyone tell me what the most common options are to force traffic over
the VPN connection? Do I have to script this by e.g. adjusting the
connection metrics? Playing with static routes doesn't seem to work.

Thanks in advance,

Carl.

 

[Manjari Bonam [MSFT]]

Are you connecting to the same RAS Server by both dial-up and VPN? WHy do
you want to do that?
traffiic goes over the first known route in the routing table. It is not
with the RAS. It is entirely with the TCP/IP infrastructure.

 

[Casper]

Hi Manjari,

What I wanted to do was emulating the situation as described in course
70-216. In that course they mention the situation I could dial in locally to
an ISP in say Taiwan, and then make a VPN tunnel to the RAS server in
Chicago. That saves the company long distance call costs. Since I need to
dial up first before I get the option to connect using the VPN connection, I
decided to make 2 connections (1 dial-up, 1 VPN) to 1 RAS server. Voila my
problem!

What I was thinking about is this. If I want to make a connection to a
Terminal Server located in our company based on its name (e.g.
ts1.mycompany.com), and that name wouldn't be in the public DNS database,
the DNS lookup on the dial-up connection would time-out and the DNS server
of the VPN connection would probably do the name resolving. That DNS server
does find the entry. Now will the session to ts1.mycompany.com be made on
the connection whose DNS server did the correct resolving? I never read this
anywhere, so it seems hard to believe... So I'm still faced with no
security!

Thanks,

Carl.