Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have VPN access to several machines in my office from my home machine. I'd like to be able to access those machines from another computer on my LAN, without setuping a second VPN access. Both computers are Windows 7 machines.

Is there a way for my "main" computer to share its VPN access to another machine on the LAN? How would one setup this share?

I don't think "simple" Internet connection sharing fits my needs because:

  1. My LAN already has its own DHCP/Router to access the Internet, and I'd like to keep it this way
  2. I can't access the Internet through my VPN connection
share|improve this question

migrated from Sep 1 '10 at 18:21

This question came from our site for system and network administrators.

Are you responsible for the VPN server? What type of VPN is it, or what VPN client does it use? – Zoredache Sep 1 '10 at 18:23
No, I'm not responsible for the VPN Server, my company sysadmins' are. I guess I can pretty easily ask them specific questions. It's a Cisco VPN, and I use Cisco AnyConnect to connect to it. – Axelle Ziegler Sep 1 '10 at 18:38
installing a VPN router on your side should help you get all computers to access the VPN'ed network.. but i think both sided needs it.. hence comment only not answer – ppumkin Dec 29 '11 at 21:38
up vote 2 down vote accepted

I believe the solution is to create a site-to-site VPN, and not have computers run the tunnel individualy.

Perhaps your sysadmins could point you in the direction on how to do so?

share|improve this answer
+1 for the "right way" solution. Adding static routes on your home LAN for something that is not always going to be connected, and something whose configuration you do not control/might change is a recipe for unmaintainability and trouble. Either set up a second AnyConnect endpoint on the second computer (Cisco makes clients for all different OSes), or connect to the VPN at the router level. Heck, if your router runs something like DD-WRT or a linux-ish OS, you might even be able to put an AnyConnect client on it. If not, though, get a site-to-site VPN. It's what you're asking for. – Zac B Nov 28 '12 at 19:37
Actually, I did connect to the VPN at the router level. – Axelle Ziegler Dec 14 '12 at 7:53

It seems I’ve solved same problem for myself today:

My configuration:

  • Router has address and DHCP on
  • Windows 7 PC has LAN IP (netmask gateway and PPTP VPN to remote network

My last attempt was (and it's working!):

  • I switched on ICS on VPN connection and choose LAN as a target
  • This changed my PC LAN IP to and clears gateway, so I fixed it by setting the LAN IP to, netmask to, and gateway to (my DNS was initially)
  • I’ve add a static route on the router: mask gateway

I have tried a thousand combinations and finally it’s working! Hopefully it can help others.

share|improve this answer
Tweaking router config is by far the best solution. This way i was able to share VPN connection with other PCs without messing with route command line tool. – esteewhy Oct 1 '15 at 12:48

You might be able to get away with adding a route on the second machine to direct traffic to the VPN through the machine running the VPN client. I'm thinking something like:

route add MASK

where is IP of the work VPN and is IP of the VPN client. You might check out this discussion of the route command

EDIT: Linux syntax should be

route add netmask gw

On windows it's

route add MASK gateway
share|improve this answer
Will check that when Ic ome back home on monday. Thanks a lot. – Axelle Ziegler Sep 3 '10 at 15:39
Looks like I'm wrong. I spent some time playing with it and had no luck. Sorry – rlduffy Sep 7 '10 at 1:47

The ability to allow a second computer to use the VPN depends on the settings your VPN client has - usually, VPN clients preconfigured by "corporate" admins are set to only allow the node actually running the VPN client software in on the VPN link.

I had a similar problem when I wanted a device to access a CVS server behind a firewall, but did not have a VPN client on that device. Solution: configure a non-standard port on the "2nd machine", run SSH (in your case: PuTTY) to forward that port to the server only "1st machine" can see when the VPN is connected:

[2nd_machine]-->[1025/tcp PuTTy on 1st_machine forwards]-->[VPN concentrator]-->[22/tcp CVS Server]

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.