VPN Split Tunnel Setup

[thinkstorm]

Dear all,
I am trying setup a split tunnel for our VPN - accessing the Internet
via my 8Mbps Comcast cable, while accessing the Intranet via the VPN
connection. Under Windows XP everything was working fine, one Windows
Vista the split tunnel script I had is not working anymore.

The old script looked in 'ipconfig' for 192.168.48.* (our VPN subnet),
and determined my IP address on the VPN. The subsequent commands
were
route delete 0.0.0.0 mask 0.0.0.0 <myVPNIPAddress>
route add 172.16.0.0 mask 255.255.0.0 <myVPNIPAddress>
route add 192.168.47.0 mask 255.255.255.0 <myVPNIPAddress>

 

[Steve Riley [MSFT]]

You'll probably have to change the way your script is parsing the ipconfig
output. I don't remember now what it looked like on XP, I suspect Vista's
output format is different.

However: split tunneling is dangerous, don't do it. An attacker on the
Internet could penetrate your corpnet through your VPN connection if he
manages to get malicious software on your computer.

Steve Riley
(e-mail address removed)
http://blogs.technet.com/steriley