Internet Browsing Through VPN 1

[DjBFunky]

Hi Guys

Got a little predicament here, the situation is that i have an internet subscriber server sat behind a firewall as an internet cafe billing and authentication system using UAT to proxy the users before they can browse the internet. so that the users have to buy a user name and password from the counter before they can get through the proxy.

Now i have to add another 4 computers in a different building on the other side of the town so i need to connect the places togeter so that the users that are using the computers at the remote location have to surf through a vpn connection to the internet subscriber server at the main location, and then once authenticated they can surf the net through my connection at the main office while still surfing through the vpn.

Has anybody got any ideas whether this is possible and if so could you please point me in the direction of some help towards accomplishing it.

Thanks in advanced for any help
Brad

 

[ChicagoTechNet]

this may help. quoted from

http://www.chicagotech.net/

Can't access the Internet while using VPN

Symptom: after establishing a VPN connection, you may not be able to access the Internet because the VPN takes over your existing connection and all traffic to use the VPN default gateway on the remote network. The remote network may not allow VPN clients to access the Internet via their gateway.

Resolutions:
1) If you don't need to access the entire VPN resources, disable the "use default gateway on remote network" option in the properties of the VPN connection. To do that, go to VPN Connection->Properties->Network->TCP/IP->Properties->Advanced-, uncheck "Use default gateway on Remote Network".
2) Edit route table manually if you know how to or check routing page on this web site.


Robert Lin, MS-MVP, MCSE & CNE
Windows, Network, Internet, VPN, Routing and How to at

http://www.ms-mvps.com

 

[lgarner]

It depends on your VPN implementation. Some, like the Cisco Pix, do not allow packets to exit the same interface on which they arrive, so it won't work. So, you'd really need separate VPN and firewall devices at the main office.

Some, like Linux, do allow this, so it's no problem.

One thing about the medium-to-high-end approach: you can block user access through the remote device unless they are authenticated to the main device. Then you don't need the traffic bouncing off your main site and doubling the bandwidth used there.

 

[ChicagoTechNet]

thanks for the input.

Robert Lin, MS-MVP, MCSE & CNE
Windows, Network, Internet, VPN, Routing and How to at

http://www.ms-mvps.com