Solved

OS X: connect to a VPN using the same subnet on local and remote network

Posted on 2010-11-21
14
2,168 Views
Last Modified: 2012-05-10
Hi,

I'm trying to connect a MacBook Pro using OS X to a Windows PPTP VPN at work with the same subnet on both sides.

In XP I would just uncheck the box "use default gateway for remote network" in TCP/IP-settings to get it work.

The option "send all traffic through VPN-connection" in OS X doesn't seem to help.

I am aware that this can be avoided by using different subnets, but that is not what I'm asking for.

Any idea how I can make this work?
0
Comment
Question by:alexandrus
  • 7
  • 4
  • 3
14 Comments
 
LVL 8

Expert Comment

by:et01267
ID: 34183446
Which aspect of the connection is failing?  There are a zillion things that can go wrong with a VPN connection, particularly between different vendors.  The subnet issue may be a red herring; there may be some protocol setting mismatch or something more fundamental.  Usually, I find that I need to use a payware VPN client, like VPN Tracker

What errors or messages do you see?  Have you checked the console logs (Applications/Utilities/Console) to see what's happening?
0
 

Author Comment

by:alexandrus
ID: 34183519
As i wrote, the problem is the same subnet, making the IPs on the remote site unreachable (i.e. I can only ping local IPs). The VPN connection is working perfectly fine (from a network with a different subnet).

It's just a routing problem. How to make this work on a Mac?
0
 

Author Comment

by:alexandrus
ID: 34183533
To make it clearer:

The behaivor I look for (and which I achieve in Windows using the setting mentioned above) is disabling the local network and routing all TCP/IP to the remote network.
0
 
LVL 8

Expert Comment

by:et01267
ID: 34183554
And you are sure that it works on the Mac when you have different subnets?
0
 

Author Comment

by:alexandrus
ID: 34183608
Yes
0
 
LVL 8

Expert Comment

by:et01267
ID: 34183674
What IP address is your Mac using on the local Lan?  Are you sure this address is not being used on the remote network?  
0
 

Author Comment

by:alexandrus
ID: 34183748
Local IP: 192.168.0.3
Remote IP: 192.168.0.115

both unique.

But why would the local IP matter? Only the virtual adapter IP is part of the remote network. So as long I don't want to access exactly this IP on the remote net it might also be present on both nets.

I think you didn't understand my problem.. Right now I can still ping my local network when I am connected trough VPN. If subnets are the same in local and remote net, how should the OS know how to route a packet to let's say 192.168.0.50 (which might be even present in both nets). All I want is to force routing on the mac through the VPN-adapter.
0
Enterprise Mobility and BYOD For Dummies

Like “For Dummies” books, you can read this in whatever order you choose and learn about mobility and BYOD; and how to put a competitive mobile infrastructure in place. Developed for SMBs and large enterprises alike, you will find helpful use cases, planning, and implementation.

 
LVL 7

Expert Comment

by:njxbean
ID: 34183785
Have you tried using another VPN client?
0
 

Author Comment

by:alexandrus
ID: 34183815
No, but I would try it if I knew one which can fix that routing problem.
0
 
LVL 7

Expert Comment

by:njxbean
ID: 34183861
Only one way to find out.

Give this a try.  its free  Maybe there will be an equivalent setting to force it to use the remote networks default gateway.  

http://openvpn.net/
0
 
LVL 7

Expert Comment

by:njxbean
ID: 34184691
fyi it looks like openvpn does have that option.


One interesting capability of the OpenVPN tunnel is to optionally allow the client to pass all traffic through the VPN tunnel when connected. For example, when you are using an unsecure WiFi hotspot, you might want to ensure that eavesdroppers are not able to monitor your WiFi traffic. One way to do this is to route all your WiFi traffic through the encrypted VPN tunnel, using the "redirect-gateway" option on the server or the client. When configured on the server, all clients will reroute all their traffic through the VPN. The "redirect-gateway" option requires pushing two pieces of information from the server to the client, the remote gateway and DNS IP addresses.
0
 

Author Comment

by:alexandrus
ID: 34236264
Had a short try with OpenVPN, but it seemed like to much of a hassle and I ended up changing one of the subnets.

Still, the initial question stands.

Does anyone know how to fix this issue with the OS X built-in VPN client?
0
 
LVL 8

Accepted Solution

by:
et01267 earned 500 total points
ID: 34238451
Try this:  Set your network interface ("service order") to have the VPN connection on top, as follows:

1. Go to System Prefs -> Network and click the gear icon at lower left.
2. Select the "Set Service Order" choice from that menu, and then drag the VPN to the top.

Now experiment with the "send all traffic..." option in the vpn settings.
0
 

Author Comment

by:alexandrus
ID: 34481377
Thanks for your suggestion.

Unfortunately I don't have the MacBook anymore to try it.
0

Featured Post

Free camera licenses with purchase of My Cloud NAS

Milestone Arcus software is compatible with thousands of industry-leading cameras for added flexibility. Upon installation on your My Cloud NAS, you will receive two (2) camera licenses already enabled in the software. And for a limited time, get additional camera licenses FREE.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I've written this article to illustrate how we can implement a Dynamic Multipoint VPN (DMVPN) with both hub and spokes having a dynamically assigned non-broadcast multiple-access (NBMA) network IP (public IP). Here is the basic setup of DMVPN Pha…
Today, still in the boom of Apple, PC's and products, nearly 50% of the computer users use Windows as graphical operating systems. If you are among those users who love windows, but are grappling to keep the system's hard drive optimized, then you s…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…

911 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now