Using CMAK to create VPN scripts are no good.

[Joe M]

Using CMAK connection manager to create VPN scripts is no good/nuisance.
It's quick for the client deployment process but would produce lots of
problems. Because the VPN script it generate would always turn the default
gateway to be the VPN ip address not the RAS ip address. For people who need
to have network connections, internet and vpn running at the same time,
having the RAS ip address as the default gateway is important. Would there
be any way to get the CMAK to generate a VPN script that have RAS ip address
as the default gateway/ and disable use default gateway on remote
network?????

 

[David Beder [MSFT]]

The Win2k3 version of the CMAK wizard has a pane dedicated to allowing the
admin to include a route file such that the resultant package is able to
chose not to acquire the remote default gateway and still be able to use
that vpn connection to properly route packets to the vpn network.
Previous versions of CMAK could always let you chose not to acquire the
remote default gateway, however it was traditionally much more difficult to
ensure that vpn traffic didn't go out onto the internet, thus failing to get
to resources.