• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 143
  • Last Modified:

Using Static Route with VPN users

Hi All,

I have a question regarding using Static Routes with VPN users.

Basically we use SBS 2011 and the built in VPN to allow users to access a CRM solution. The majority of the users are external users based in Ireland and the UK. All users are Windows 7 based.  The users were complaining about slow internet speeds when connecting through the VPN (which is understandable as all traffic was passed through the VPN to HQ in Ireland). To address this I have set the external users to not Use default gateway on remote network on there VPN connections.

I was just wondering should I know create a Static Route in the routing table so that server traffic is passed through the VPN? I was looking at the following article that explains the process: http://old.stevenharman.net/blog/archive/2007/01/26/VPN_Connections_and_Default_Gateways.aspx

Any feedback would be appreciated.
0
brianquin
Asked:
brianquin
  • 5
  • 2
  • 2
  • +1
5 Solutions
 
David AtkinTechnical DirectorCommented:
Hello,

The routes should be updates when then the VPN is created so under normal circumstances you shouldn't need to use static routes.  

The default gateway option you unticked should help but if they are still complaining it may be worth checking our their internet speeds on each site.

Our of interest, are you using SBS for the VPNs or your router?
0
 
brianquinAuthor Commented:
Hi David,

Thanks for the reply. We are using SBS for the VPNs (VPN tunnel passes through our Firewall to the SBS Server).

Un-ticking the Default Gateway option has helped, just wondering because of the change would the route need to be updated.

Thanks Again.
0
 
QlemoBatchelor, Developer and EE Topic AdvisorCommented:
Above is true if all clients use their own connection, instead of a LAN-LAN VPN.
0
Worried about phishing attacks?

90% of attacks start with a phish. It’s critical that IT admins and MSSPs have the right security in place to protect their end users from these phishing attacks. Check out our latest feature brief for tips and tricks to keep your employees off a hackers line!

 
brianquinAuthor Commented:
Hi All,

We don't use Site-to-Site as the users are all field based.
0
 
VB ITSSpecialist ConsultantCommented:
Have a look at this Microsoft article, most notably at Step 4 as it will contain the relevant command you need to add the static route: http://support.microsoft.com/kb/317025
0
 
QlemoBatchelor, Developer and EE Topic AdvisorCommented:
Then again, you need to add static routes only if you have more than the SBS/VPN server subnet to be reachable via VPN, or the RAS IP Pool is not part of the SBS subnet. Otherwise no need for any change.
0
 
David AtkinTechnical DirectorCommented:
Hi brianquin,

The route will have automatically updated when you un-ticked the use vps for default gateway option so no need for any statics :).

Dave
0
 
brianquinAuthor Commented:
Hi All,

That's perfect. Thanks for the help.

We don't use any other subnets (apart from DMZ but that is used for different services).

Thanks Again.
0
 
brianquinAuthor Commented:
Sorry.
0
 
brianquinAuthor Commented:
Provided answer to question topic.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Worried about phishing attacks?

90% of attacks start with a phish. It’s critical that IT admins and MSSPs have the right security in place to protect their end users from these phishing attacks. Check out our latest feature brief for tips and tricks to keep your employees off a hackers line!

  • 5
  • 2
  • 2
  • +1
Tackle projects and never again get stuck behind a technical roadblock.
Join Now