VPN blocks local network
Bookmark this page:
 Yahoo!
 Google
 Windows Live
 del.icio.us
 digg
 Netscape
|
|
||||||||||||||||||||||
|
Posted by on September 20, 2005, 6:57 pm
Please log in for more thread options I have a vpn from my work computer to the main office down the street. When i connect, i can no longer get to my local network. How do i set it up so i have access to both networks (vpn and lcoal) at the same time? | ||||||||||||||||||||||
|
Posted by Martin Bodenstedt on September 26, 2005, 1:11 pm
Please log in for more thread options wwwc21@gmail.com schrieb: This is by design! >
> How do i set it up so i have access to both networks (vpn and lcoal) at > the same time? You should never have that. Once your computer has an open VPN connection to your head office only your computer should be visible from the head office and your head office should only see your computer. What You want is called "split tunneling" and is an absolute nono for security reasons... -- Martin Bodenstedt www.landtag-bw.de / www.die-bodenstedts.de | ||||||||||||||||||||||
|
Posted by Russell Zager on September 28, 2005, 1:43 pm
Please log in for more thread options
What if you have 2 network cards? Can you see two networks that way? | ||||||||||||||||||||||
|
Posted by Martin Bodenstedt on September 29, 2005, 7:15 am
Please log in for more thread options
Russell Zager schrieb: > What if you have 2 network cards? Can you see two networks that way?
Not if the vpn is implemented correctly. Remember: the isolation of the pc against your own lan while the tunnel is up is by design and a crucial security issue. I as a network administrator have to make absolutely sure that a pc connecting to my lan from the outside (via vpn) does not work as a smokescreen for (potentially malicious) computers on that pc's lan and the only way to achieve this is to modify the PC's routing table in such a way as to make this pc an end node - no matter what else the pc is connected to physically... -- Martin Bodenstedt www.landtag-bw.de / www.die-bodenstedts.de | ||||||||||||||||||||||
> When i connect, i can no longer get to my local network.