Discussion between Pimp Juice IT and Jåcob

Trouble Maker Chat Broom

15:14

What's up Jake

Jåcob

Hello

Trouble Maker Chat Broom

It's me but my handle changes

handle name**

in any case

Paste the route print output here now connected with the added route

Jåcob

I do understand

Trouble Maker Chat Broom

Cool

Show me your route print output now

Jåcob

You mean when connected to VPN?

Trouble Maker Chat Broom

15:15

Yes and when you have added the new route I suggested in the comment too

You remove

Jåcob

===========================================================================
Interface List
21...10 62 e5 e3 8c 58 ......Realtek Gaming GBE Family Controller
11...76 40 bb 49 9b 93 ......Microsoft Wi-Fi Direct Virtual Adapter #3
15...74 40 bb 49 9b 93 ......Microsoft Wi-Fi Direct Virtual Adapter #4
23...00 09 0f fe 00 01 ......Fortinet Virtual Ethernet Adapter (NDIS 6.30)
14...74 40 bb 49 9b 93 ......Realtek RTL8822BE 802.11ac PCIe Adapter
25...........................TEST
6...74 40 bb 49 9b 94 ......Bluetooth Device (Personal Area Network)

Trouble Maker Chat Broom

Give me a second here to analyze and think

Jåcob

Sure, by all means take your time

Trouble Maker Chat Broom

Okay, can you run two elevated commands and then once both are successful give me the route print output again

Command 1: route DELETE 0.0.0.0 MASK 0.0.0.0 192.168.100.1

Command 2: route ADD 0.0.0.0 MASK 0.0.0.0 192.168.100.1

Once complete show me the route print output again

Jåcob

while connected to the VPN?

Trouble Maker Chat Broom

15:22

Yes

Jåcob

D:\>route DELETE 0.0.0.0 MASK 0.0.0.0 192.168.100.1
OK!

D:\>route ADD 0.0.0.0 MASK 0.0.0.0 192.168.100.1
OK!

route print
===========================================================================
Interface List
21...10 62 e5 e3 8c 58 ......Realtek Gaming GBE Family Controller
11...76 40 bb 49 9b 93 ......Microsoft Wi-Fi Direct Virtual Adapter #3
15...74 40 bb 49 9b 93 ......Microsoft Wi-Fi Direct Virtual Adapter #4
23...00 09 0f fe 00 01 ......Fortinet Virtual Ethernet Adapter (NDIS 6.30)
14...74 40 bb 49 9b 93 ......Realtek RTL8822BE 802.11ac PCIe Adapter
25...........................TEST
6...74 40 bb 49 9b 94 ......Bluetooth Device (Personal Area Network)

Trouble Maker Chat Broom

Okay I need you to do it again while connected to the VPN but like this now

Command 1: route DELETE 0.0.0.0 MASK 0.0.0.0 192.168.100.1

Command 2: route ADD 0.0.0.0 MASK 0.0.0.0 192.168.100.1 METRIC 10

Then show me route print output

Jåcob

D:\>route DELETE 0.0.0.0 MASK 0.0.0.0 192.168.100.1
OK!

D:\>route ADD 0.0.0.0 MASK 0.0.0.0 192.168.100.1 METRIC 10
OK!

===========================================================================
Interface List
21...10 62 e5 e3 8c 58 ......Realtek Gaming GBE Family Controller
11...76 40 bb 49 9b 93 ......Microsoft Wi-Fi Direct Virtual Adapter #3
15...74 40 bb 49 9b 93 ......Microsoft Wi-Fi Direct Virtual Adapter #4
23...00 09 0f fe 00 01 ......Fortinet Virtual Ethernet Adapter (NDIS 6.30)
14...74 40 bb 49 9b 93 ......Realtek RTL8822BE 802.11ac PCIe Adapter
25...........................TEST
6...74 40 bb 49 9b 94 ......Bluetooth Device (Personal Area Network)

Trouble Maker Chat Broom

The metric for the route ADD 0.0.0.0 MASK 0.0.0.0 192.168.100.1 METRIC 10 is too high for some reason even when setting it to an explicit 10?

What does the output of route print look like after running route DELETE 0.0.0.0 MASK 0.0.0.0 192.168.100.1 before running the route ADD 0.0.0.0 MASK 0.0.0.0 192.168.100.1 METRIC 10 command?

Wonder if it's really deleting it or if there's something I'm overlooking here

Jåcob

Let me try

Trouble Maker Chat Broom

15:33

I think the issue is 0.0.0.0 0.0.0.0 On-link 11.123.0.1 56 has a metric of 56 and 0.0.0.0 0.0.0.0 192.168.100.1 192.168.100.7 4266 gets a much higher metric. This means the traffic will go thru the VPN IP address before the home ISP gateway.

Jåcob

Output

D:\>route DELETE 0.0.0.0 MASK 0.0.0.0 192.168.100.1
OK!

D:\>route print
===========================================================================
Interface List
21...10 62 e5 e3 8c 58 ......Realtek Gaming GBE Family Controller
11...76 40 bb 49 9b 93 ......Microsoft Wi-Fi Direct Virtual Adapter #3
15...74 40 bb 49 9b 93 ......Microsoft Wi-Fi Direct Virtual Adapter #4
23...00 09 0f fe 00 01 ......Fortinet Virtual Ethernet Adapter (NDIS 6.30)
14...74 40 bb 49 9b 93 ......Realtek RTL8822BE 802.11ac PCIe Adapter

Upon execution of route DELETE and route ADD, the VPN does disconnect.

Trouble Maker Chat Broom

Check out serverfault.com/questions/238695/…

It talks about the automatic metric of the IPv4 in the NIC properties

I wonder if unchecking it would help but I don't want you to keep changing things so there are just ideas

What VPN are you connected to exactly? One you setup or a corporation?

On the server side of the VPN I suppose if what I'm talking about

Jåcob

I am using Fortieclient VPN client and connected to my company network by providing username and password

Type of VPN is SSTP

Trouble Maker Chat Broom

Ok I see

The only other thing I can think you can try is to uncheck the NIC IPv4 Automatic Metric option and set it to 10 as per

and then run those two route commands I gave you and see if the route print shows a lower metric then

Is this your personal machine or is the machine a corporate machine as well

Jåcob

15:48

my personal laptop

Trouble Maker Chat Broom

I don't see why you wouldn't be able to route only the IP traffic for the 11.123.0.x to the VPN and tell everything else to go to your ISP router or whatever.

I'm not familiar with the server side either but if it disconnects and reconnects after each add and delete of the route, it may be pushing routes to the machine and overwriting anything you set otherwise

Jåcob

Automatic Metric option should be that of the VPN client or Wifi? Ethernet is disconnected

Trouble Maker Chat Broom

On the Ethernet or Wi-Fi and not the VPN virtual adapter/NIC if applicable.

So Wi-Fi

Your company may disallow split tunneling and auto disconnect and reconnect if the routing table changes any. Maybe but I'm not sure and the disconnect and reconnect will push new route to the VPN connected machine and undo whatever you set and give the home ISP gateway a higher metric again.

I'm not 100% certain though.

Jåcob

Before the changing the option, see the below image. Does this cause any issue as it is checked for automatic?

Outputs

D:\>route DELETE 0.0.0.0 MASK 0.0.0.0 192.168.100.1
OK!

D:\>route print
===========================================================================
Interface List
21...10 62 e5 e3 8c 58 ......Realtek Gaming GBE Family Controller
11...76 40 bb 49 9b 93 ......Microsoft Wi-Fi Direct Virtual Adapter #3
15...74 40 bb 49 9b 93 ......Microsoft Wi-Fi Direct Virtual Adapter #4
23...00 09 0f fe 00 01 ......Fortinet Virtual Ethernet Adapter (NDIS 6.30)
14...74 40 bb 49 9b 93 ......Realtek RTL8822BE 802.11ac PCIe Adapter

Is it something to do with VPN client? Excuse my ignorance about this subject matter.

Trouble Maker Chat Broom

16:10

I'm not 100% certain but every time you do a route delete and a route add the VPN disconnects and reconnects, right?

The setting of the automatic metric did not work so you might as well check that option and change it back to the way it was before.

Jåcob

Yes, does disconnect and then I have to manually connect again

Trouble Maker Chat Broom

I think that's the problem and the VPN server you are connecting to has a policy that is enforced

If the VPN client routing table, etc. changes, it'll disconnect

Then on the next reconnect, it'll push the routes to the client again

I'm not a VPN expert either but that's what it sounds like is going on to me

Have you asked the VPN administrators at your company about allowing split tunneling?

Jåcob

I will check with the admin

Much appreciated for the effort and time.

Trouble Maker Chat Broom

No worries.... I wish you the best of luck and look forward to hearing back if you find a workable solution.

Jåcob

Will certainly update if it is redressed.

Trouble Maker Chat Broom

21:42

@Jåcob Be sure to tag me back as @TroubleMakerChatBroom or whatever so I get a notice when you do when I'm not in the chat session. I see this post: informaticar.net/… and it may have helpful detail in it.

I guess I missed the part where you said SSTP so I think this means you control the VPN server side of the VPN setup, correct?

The part that states....

> On Client PC that has already created VPN connection
Control Panel |Network and Sharing Center |Change adapter Settings |Right Click on VPN connection that you want Split Tunneling enabled | Choose Properties | Choose Networking Tab | Mark Internet Protocol Version 4 (TCP/IPv4) and then click on Properties button

> In new window that opens click on Advanced

> Again new window opens. In order to enable split tunneling you need to UNCHECK “Use default gateway on remote network” option.

> When you unchecked that option confirm with OK, and close all properties.

> After that connect to your VPN and you`ll have access to both your local and remote network.

The link will have pics/screen shots to go along and between those steps. This might fix it for you potentially.

Transcript for

Discussion between Pimp Juice IT and …