Solved

Using Static Route with VPN users

Posted on 2014-12-08
11
127 Views
Last Modified: 2014-12-13
Hi All,

I have a question regarding using Static Routes with VPN users.

Basically we use SBS 2011 and the built in VPN to allow users to access a CRM solution. The majority of the users are external users based in Ireland and the UK. All users are Windows 7 based.  The users were complaining about slow internet speeds when connecting through the VPN (which is understandable as all traffic was passed through the VPN to HQ in Ireland). To address this I have set the external users to not Use default gateway on remote network on there VPN connections.

I was just wondering should I know create a Static Route in the routing table so that server traffic is passed through the VPN? I was looking at the following article that explains the process: http://old.stevenharman.net/blog/archive/2007/01/26/VPN_Connections_and_Default_Gateways.aspx

Any feedback would be appreciated.
0
Comment
Question by:brianquin
  • 5
  • 2
  • 2
  • +1
11 Comments
 
LVL 22

Assisted Solution

by:David Atkin
David Atkin earned 125 total points
ID: 40486508
Hello,

The routes should be updates when then the VPN is created so under normal circumstances you shouldn't need to use static routes.  

The default gateway option you unticked should help but if they are still complaining it may be worth checking our their internet speeds on each site.

Our of interest, are you using SBS for the VPNs or your router?
0
 

Author Comment

by:brianquin
ID: 40486538
Hi David,

Thanks for the reply. We are using SBS for the VPNs (VPN tunnel passes through our Firewall to the SBS Server).

Un-ticking the Default Gateway option has helped, just wondering because of the change would the route need to be updated.

Thanks Again.
0
 
LVL 69

Assisted Solution

by:Qlemo
Qlemo earned 250 total points
ID: 40486543
Above is true if all clients use their own connection, instead of a LAN-LAN VPN.
0
Back Up Your Microsoft Windows Server®

Back up all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

 

Author Comment

by:brianquin
ID: 40486557
Hi All,

We don't use Site-to-Site as the users are all field based.
0
 
LVL 24

Assisted Solution

by:VB ITS
VB ITS earned 125 total points
ID: 40486558
Have a look at this Microsoft article, most notably at Step 4 as it will contain the relevant command you need to add the static route: http://support.microsoft.com/kb/317025
0
 
LVL 69

Assisted Solution

by:Qlemo
Qlemo earned 250 total points
ID: 40486573
Then again, you need to add static routes only if you have more than the SBS/VPN server subnet to be reachable via VPN, or the RAS IP Pool is not part of the SBS subnet. Otherwise no need for any change.
0
 
LVL 22

Expert Comment

by:David Atkin
ID: 40486612
Hi brianquin,

The route will have automatically updated when you un-ticked the use vps for default gateway option so no need for any statics :).

Dave
0
 

Accepted Solution

by:
brianquin earned 0 total points
ID: 40486620
Hi All,

That's perfect. Thanks for the help.

We don't use any other subnets (apart from DMZ but that is used for different services).

Thanks Again.
0
 

Author Comment

by:brianquin
ID: 40486652
Sorry.
0
 

Author Closing Comment

by:brianquin
ID: 40497782
Provided answer to question topic.
0

Featured Post

Easy, flexible multimedia distribution & control

Coming soon!  Ideal for large-scale A/V applications, ATEN's VM3200 Modular Matrix Switch is an all-in-one solution that simplifies video wall integration. Easily customize display layouts to see what you want, how you want it in 4k.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

OpenVPN is a great open source VPN server that is capable of providing quick and easy VPN access to your network on the cheap.  By default the software is configured to allow open access to your network.  But what if you want to restrict users to on…
If you use NetMotion Mobility on your PC and plan to upgrade to Windows 10, it may not work unless you take these steps.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…

808 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question