I am trying to get my VPN connection to only route network traffic related to my workplace through the VPN connection and any other traffic through my Wi-Fi connection.
If I have my Wi-Fi at the top of the service order list I can not access my work network with VPN connected and when my VPN connection is at the top I can not access anything other than my work network.
Could the problem be because my works DNS server resolves internet addresses but does not allow connections through their router to internet bound addresses?
My local router/name server is : 10.10.10.3 Remote VPN name-server is : 10.1.1.88
The output from
scutil --dns is as follows, I find it odd that the VPN nameserver is showing up in
DNS configuration resolver #1 search domain : home-domain.com nameserver : 10.1.1.88 order : 100000 resolver #2 nameserver : 10.10.10.3 order : 200000 resolver #3 domain : local options : mdns timeout : 5 order : 300000 resolver #4 domain : 254.169.in-addr.arpa options : mdns timeout : 5 order : 300200 resolver #5 domain : 8.e.f.ip6.arpa options : mdns timeout : 5 order : 300400 resolver #6 domain : 9.e.f.ip6.arpa options : mdns timeout : 5 order : 300600 resolver #7 domain : a.e.f.ip6.arpa options : mdns timeout : 5 order : 300800 resolver #8 domain : b.e.f.ip6.arpa options : mdns timeout : 5 order : 301000 DNS configuration (for scoped queries) resolver #1 search domain : home-domain.com nameserver : 10.10.10.3 if_index : 5 (en1) flags : Scoped resolver #2 search domain : vpn-domain.com nameserver : 10.1.1.88 if_index : 8 (ppp0) flags : Scoped
Looking at my netstat -r reveals the following, I might note here that there is no route for 10.1.. which is where most of my destinations are (10.1.7.* is just the VPN connections).
Destination Gateway Flags Refs Use Netif Expire default home.gateway UGSc 17 0 en1 default 184.108.40.206 UGScI 2 0 ppp0 10.1.7/24 ppp0 USc 0 0 ppp0 10.10.10/24 link#5 UCS 8 0 en1 home.gateway 0:4:ed:d:ed:b9 UHLWIi 40 58916 en1 1192 brettsmac.localdom localhost UHS 0 1704 lo0 10.10.10.255 ff:ff:ff:ff:ff:ff UHLWbI 0 2 en1 220.127.116.11 home.gateway UGHS 3 34401 en1 127 localhost UCS 0 0 lo0 localhost localhost UH 8 1672518 lo0 169.254 link#5 UCS 0 0 en1
UPDATE: Talking to our infrastructure team have told me how to solve this for windows 7; Under the "Advanced TCP/IP Settings" tab of the VPN connection we are to un-tick the option "Use default gateway on remote network", is there a similar setting in OSX?