VPN Split Tunneling

在使用VPN的过程里面遇到了一个问题，那就是我希望只对校园网的ip使用vpn。
这就要使用VPN Split Tunneling，这个东东在Windows XP里面默认是关闭的，而且配置的窗口埋藏的很深。网络连接 --> 属性 --> 网络 --> TCP/IP --> 高级 --> 去掉“在远程网络上使用默认网关”的checkbox的选择。
从命令行用route print命令查看路由表，可以看到在完成配置前，VPN的interface被配置成Destination 0.0.0.0 MASK 0.0.0 也就是说，它成为了默认路由，所有的ip包都会被发送到vpn的网关，而去掉之后，这个路由表项就没有了。
然后，需要手动将要使用vpn的ip加到路由表里面，还是用route 命令。为了方便，已经做了一个bat。但是，现在的问题是，一旦掉线重播，vpn本机的interface的ip地址会变化，因而目前还无法使用全自动的bat完成连接。只能够是，掉线 -> vpn重播，查看路由表弄清当前ip，重新添加路由表项。
不知道有啥办法从bat里面获取当前的vpn ip，如果可以的话就可以全自动了。

• Arnshea's space: Split-Tunneling for PPTP vpn clients

  tags: no_tag

  • Split-Tunneling isn't supported by the Windows XP vpn client.

• VPN Clients and Split Tunneling

  tags: no_tag

  • You run into big trouble when users decide to subvert network security by disabling the "Use Default Gateway on Remote Network" option. When users disable this option, a network route is still added to the VPN client's routing table, but it is not a default route. Instead of adding a new default route (gateway), the route added directs requests for the classfull network ID the VPN client was assigned on its VPN interface

• VPN Clients and Split Tunneling

  VPN Clients and Split Tunneling

  tags: vpn

  • The "Use Default Gateway on the Remote Network" option is enabled by default. When the VPN client connects to the VPN server, a new default route is created on the VPN client and it appears in the VPN client's routing table. You can view this new route by opening a command prompt and typing the "route print" command
  • A VPN client with the "Use Default Gateway on Remote Network" setting enabled cannot access the Internet because the VPN client now uses the VPN interface to route packets to remote (non-local) networks after the new default route is added.

Posted from Diigo. The rest of my favorite links are here.