VPN Client Internet Browsing Traffic Sent Thru RAS?

[David]

VPN clients are complaining that their internet access is very slow when
they are VPN-connected to the LAN. Some have used bandwidth tests on CNET
and claim that bandwidth is cut in half when VPN-connected to the LAN. Is
there a way to prevent VPN client internet traffic from being sent thru the
RAS (if that's really what's happening)?
Thanks very much,
David

 

[Marc Reynolds [MSFT]]

Sure, have then uncheck "Use Default gateway on remote network" from the
advanced TCP/IP properties of the client VPN connection. Of course a Network
Admin should be concerned about clients doing this due to security
implications. If one of the clients is compromised while connected to the
VPN the whole corporate network is open. It would be better to see if there
is a firewall/proxy/router issue causing the slowdown.


--

Thanks,
Marc Reynolds
Microsoft Technical Support

This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Bill Grant]

By default, the client sets up a default route to the RRAS server, so
that all traffic goes over the VPN link. You can prevent this by clearing
the "use default gateway .. " setting in the client's connection properties.
This leaves the default route set to the Internet connection and sets a
subnet route through the tunnel. See KB 254231 for details.

 

[David]

Marc,
User unchecked "Use Default gateway on remote network" on the client VPN
connection, and things are much faster! Five users in a branch office all
use their own VPN connections to our central office LAN. Maybe they need a
persistent-connected RAS... In the meantime, what are the security
implications you mentioned? Can I do anything about it with RAS filters or
something?
Thanks again,
David

 

[David]

Thanks Bill! That worked very well.
David

By default, the client sets up a default route to the RRAS server, so
that all traffic goes over the VPN link. You can prevent this by clearing
the "use default gateway .. " setting in the client's connection properties.
This leaves the default route set to the Internet connection and sets a
subnet route through the tunnel. See KB 254231 for details.