?
Solved

Using Static Route with VPN users

Posted on 2014-12-08
11
Medium Priority
?
133 Views
Last Modified: 2014-12-13
Hi All,

I have a question regarding using Static Routes with VPN users.

Basically we use SBS 2011 and the built in VPN to allow users to access a CRM solution. The majority of the users are external users based in Ireland and the UK. All users are Windows 7 based.  The users were complaining about slow internet speeds when connecting through the VPN (which is understandable as all traffic was passed through the VPN to HQ in Ireland). To address this I have set the external users to not Use default gateway on remote network on there VPN connections.

I was just wondering should I know create a Static Route in the routing table so that server traffic is passed through the VPN? I was looking at the following article that explains the process: http://old.stevenharman.net/blog/archive/2007/01/26/VPN_Connections_and_Default_Gateways.aspx

Any feedback would be appreciated.
0
Comment
Question by:brianquin
  • 5
  • 2
  • 2
  • +1
10 Comments
 
LVL 22

Assisted Solution

by:David Atkin
David Atkin earned 500 total points
ID: 40486508
Hello,

The routes should be updates when then the VPN is created so under normal circumstances you shouldn't need to use static routes.  

The default gateway option you unticked should help but if they are still complaining it may be worth checking our their internet speeds on each site.

Our of interest, are you using SBS for the VPNs or your router?
0
 

Author Comment

by:brianquin
ID: 40486538
Hi David,

Thanks for the reply. We are using SBS for the VPNs (VPN tunnel passes through our Firewall to the SBS Server).

Un-ticking the Default Gateway option has helped, just wondering because of the change would the route need to be updated.

Thanks Again.
0
 
LVL 71

Assisted Solution

by:Qlemo
Qlemo earned 1000 total points
ID: 40486543
Above is true if all clients use their own connection, instead of a LAN-LAN VPN.
0
What Security Threats Are We Predicting for 2018?

Cryptocurrency, IoT botnets, MFA, and more! Hackers are already planning their next big attacks for 2018. Learn what you might face, and how to defend against it with our 2018 security predictions.

 

Author Comment

by:brianquin
ID: 40486557
Hi All,

We don't use Site-to-Site as the users are all field based.
0
 
LVL 24

Assisted Solution

by:VB ITS
VB ITS earned 500 total points
ID: 40486558
Have a look at this Microsoft article, most notably at Step 4 as it will contain the relevant command you need to add the static route: http://support.microsoft.com/kb/317025
0
 
LVL 71

Assisted Solution

by:Qlemo
Qlemo earned 1000 total points
ID: 40486573
Then again, you need to add static routes only if you have more than the SBS/VPN server subnet to be reachable via VPN, or the RAS IP Pool is not part of the SBS subnet. Otherwise no need for any change.
0
 
LVL 22

Expert Comment

by:David Atkin
ID: 40486612
Hi brianquin,

The route will have automatically updated when you un-ticked the use vps for default gateway option so no need for any statics :).

Dave
0
 

Accepted Solution

by:
brianquin earned 0 total points
ID: 40486620
Hi All,

That's perfect. Thanks for the help.

We don't use any other subnets (apart from DMZ but that is used for different services).

Thanks Again.
0
 

Author Comment

by:brianquin
ID: 40486652
Sorry.
0
 

Author Closing Comment

by:brianquin
ID: 40497782
Provided answer to question topic.
0

Featured Post

How to Use the Help Bell

Need to boost the visibility of your question for solutions? Use the Experts Exchange Help Bell to confirm priority levels and contact subject-matter experts for question attention.  Check out this how-to article for more information.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

OpenVPN is a great open source VPN server that is capable of providing quick and easy VPN access to your network on the cheap.  By default the software is configured to allow open access to your network.  But what if you want to restrict users to on…
If you’re involved with your company’s wide area network (WAN), you’ve probably heard about SD-WANs. They’re the “boy wonder” of networking, ostensibly allowing companies to replace expensive MPLS lines with low-cost Internet access. But, are they …
This Micro Tutorial will teach you the basics of configuring your computer to improve its speed. It will also teach you how to disable programs that are running in the background simultaneously. This will be demonstrated using Windows 7 operating…
The viewer will learn how to successfully download and install the SARDU utility on Windows 7, without downloading adware.
Suggested Courses
Course of the Month15 days, 6 hours left to enroll

840 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question