I am trying to get my VPN connection to only route network traffic related to my workplace through the VPN connection and any other traffic through my Wi-Fi connection.

If I have my Wi-Fi at the top of the service order list I can not access my work network with VPN connected and when my VPN connection is at the top I can not access anything other than my work network.

Could the problem be because my works DNS server resolves internet addresses but does not allow connections through their router to internet bound addresses?

My local router/name server is : 10.10.10.3 Remote VPN name-server is : 10.1.1.88

The output from scutil --dns is as follows, I find it odd that the VPN nameserver is showing up in resolver #1

DNS configuration

resolver #1
  search domain[0] : home-domain.com
  nameserver[0] : 10.1.1.88
  order    : 100000

resolver #2
  nameserver[0] : 10.10.10.3
  order    : 200000

resolver #3
  domain   : local
  options  : mdns
  timeout  : 5
  order    : 300000

resolver #4
  domain   : 254.169.in-addr.arpa
  options  : mdns
  timeout  : 5
  order    : 300200

resolver #5
  domain   : 8.e.f.ip6.arpa
  options  : mdns
  timeout  : 5
  order    : 300400

resolver #6
  domain   : 9.e.f.ip6.arpa
  options  : mdns
  timeout  : 5
  order    : 300600

resolver #7
  domain   : a.e.f.ip6.arpa
  options  : mdns
  timeout  : 5
  order    : 300800

resolver #8
  domain   : b.e.f.ip6.arpa
  options  : mdns
  timeout  : 5
  order    : 301000

DNS configuration (for scoped queries)

resolver #1
  search domain[0] : home-domain.com
  nameserver[0] : 10.10.10.3
  if_index : 5 (en1)
  flags    : Scoped

resolver #2
  search domain[0] : vpn-domain.com
  nameserver[0] : 10.1.1.88
  if_index : 8 (ppp0)
  flags    : Scoped

Looking at my netstat -r reveals the following, I might note here that there is no route for 10.1.. which is where most of my destinations are (10.1.7.* is just the VPN connections).

Destination        Gateway            Flags        Refs      Use   Netif Expire
default            home.gateway       UGSc           17        0     en1
default            119.225.149.174    UGScI           2        0    ppp0
10.1.7/24          ppp0               USc             0        0    ppp0
10.10.10/24        link#5             UCS             8        0     en1
home.gateway       0:4:ed:d:ed:b9     UHLWIi         40    58916     en1   1192
brettsmac.localdom localhost          UHS             0     1704     lo0
10.10.10.255       ff:ff:ff:ff:ff:ff  UHLWbI          0        2     en1
119.225.149.174    home.gateway       UGHS            3    34401     en1
127                localhost          UCS             0        0     lo0
localhost          localhost          UH              8  1672518     lo0
169.254            link#5             UCS             0        0     en1

UPDATE: Talking to our infrastructure team have told me how to solve this for windows 7; Under the "Advanced TCP/IP Settings" tab of the VPN connection we are to un-tick the option "Use default gateway on remote network", is there a similar setting in OSX?

link|improve this question

60% accept rate
feedback

Know someone who can answer? Share a link to this question via email, Google+, Twitter, or Facebook.

Your Answer

 
or
required, but never shown

Browse other questions tagged or ask your own question.