Welcome to City-Data.com Forum!
U.S. CitiesCity-Data Forum Index
Go Back   City-Data Forum > General Forums > Science and Technology > Computers
 [Register]
Please register to participate in our discussions with 2 million other members - it's free and quick! Some forums can only be seen by registered members. After you create your account, you'll be able to customize options and access all our 15,000 new posts/day with fewer ads.
View detailed profile (Advanced) or search
site with Google Custom Search

Search Forums  (Advanced)
 
Old 03-28-2012, 08:08 AM
 
538 posts, read 1,012,469 times
Reputation: 1118

Advertisements

I recently got a new job and we have a VPN. The part I'm getting confused is the non-split/split tunneling part. Our other practices have internet access of their own so they don't use our bandwidth once they are connected to the VPN(Split tunneling correct?).

I have an XP machine at home that I set up the VPN connection on. I have DSL and a Linksys router. I connected to the VPN on the XP machine and I see my LAN has internet access(of course) and the VPN has internet access. So just playing around, I disabled my LAN connection and I could still surf the internet. I ran IPCONFIG and it showed no IP information at all. So with both enabled I basically had two IP addresses. But with the LAN disabled, I have no IP information.

So with my LAN disabled and I'm using the VPN internet connection?

Last edited by pentatonic; 03-28-2012 at 08:17 AM..
Reply With Quote Quick reply to this message

 
Old 03-28-2012, 08:19 AM
 
Location: Cleveland, Ohio
16,548 posts, read 19,694,332 times
Reputation: 13331
I don't quite understand you.

What do you mean when you say LAN. LAN = Local Area Network which would mean every computer on your network.

You absolutely must have an Internet\Network Connection for a VPN connection to work. Absolutely. The VPN connection runs over your existing NETWORK connection. Be it wireless or hard wired.

So for example your laptop is wirelessly connected to your Linksys router. The only security you have is provided by the router. Which isn't great. You then run the VPN connection. This is basically just software to encrypt all your data.
When you run the VPN it connects your laptop VIA YOUR EXISITING NETWORK CONNECTION (in this case wifi) to a VPN server at your companies office.
Now everything you do on the internet runs through your VPN connection (i.e. through the work server). So stay off the porn sites when VPN'ed in. K?

If you DISABLE your network connection, again in this case wifi, if you shut off the wifi adapter you cannot maintain a VPN connection. It will drop.

So as I said I don't quite understand what you mean...
Reply With Quote Quick reply to this message
 
Old 03-28-2012, 08:24 AM
 
538 posts, read 1,012,469 times
Reputation: 1118
Quote:
Originally Posted by Peregrine View Post
I don't quite understand you.

What do you mean when you say LAN. LAN = Local Area Network which would mean every computer on your network.

You absolutely must have an Internet\Network Connection for a VPN connection to work. Absolutely. The VPN connection runs over your existing NETWORK connection. Be it wireless or hard wired.

So for example your laptop is wirelessly connected to your Linksys router. The only security you have is provided by the router. Which isn't great. You then run the VPN connection. This is basically just software to encrypt all your data.
When you run the VPN it connects your laptop VIA YOUR EXISITING NETWORK CONNECTION (in this case wifi) to a VPN server at your companies office.
Now everything you do on the internet runs through your VPN connection (i.e. through the work server). So stay off the porn sites when VPN'ed in. K?

If you DISABLE your network connection, again in this case wifi, if you shut off the wifi adapter you cannot maintain a VPN connection. It will drop.

So as I said I don't quite understand what you mean...
Hold on, let me try to explain again. When I say LAN, I do mean my local area connection and my internet with my ISP. If I have my own internet connection with my ISP, I shouldn't be using the VPN's internet connection. This is called split tunneling right?

Also, when I'm connected both to my ISP and my VPN. Both state they have internet access under network settings. Now, when I IPCONFIG, I can see my IP address my local router is given me and I can see my IP address the VPN router has given me. Playing around, I disabled my LAN internet connection(ISP) and I could still surf the internet. I IPCONFIG and I see no IP information at all. But I'm surfing the internet. This is what is confusing me.
Reply With Quote Quick reply to this message
 
Old 03-28-2012, 04:04 PM
 
Location: The DMV
6,590 posts, read 11,286,252 times
Reputation: 8653
Quote:
Originally Posted by pentatonic View Post
Hold on, let me try to explain again. When I say LAN, I do mean my local area connection and my internet with my ISP. If I have my own internet connection with my ISP, I shouldn't be using the VPN's internet connection. This is called split tunneling right?

Also, when I'm connected both to my ISP and my VPN. Both state they have internet access under network settings. Now, when I IPCONFIG, I can see my IP address my local router is given me and I can see my IP address the VPN router has given me. Playing around, I disabled my LAN internet connection(ISP) and I could still surf the internet. I IPCONFIG and I see no IP information at all. But I'm surfing the internet. This is what is confusing me.
That depends on how your VPN client is setup. If you're just trying to figure out if your VPN client is allowing split tunneling (and yes, you are correct about the definition), you can just look at your routing table. If you think it is because your "other practices" are doing it - and by "other practices" you mean satellite or remote locations - those site-to-site VPNs can be setup very different than the client based ones.

Still not quite sure what you mean by "disable your LAN connection". If you did anything that actually disabled the network interface - you'd lose the tunnel as well.
Reply With Quote Quick reply to this message
 
Old 03-29-2012, 08:27 AM
 
Location: Cleveland, Ohio
16,548 posts, read 19,694,332 times
Reputation: 13331
Quote:
Originally Posted by pentatonic View Post
Hold on, let me try to explain again. When I say LAN, I do mean my local area connection and my internet with my ISP. If I have my own internet connection with my ISP, I shouldn't be using the VPN's internet connection. This is called split tunneling right?
Sort of.
Split Tunneling is a feature that not all VPN's support. I assume you are using Cisco. I don't think the VPN client native to windows supports it.
Split Tunneling means your VPN software is aware when you want to access company resources versus when you want to access the Internet or an FTP site.
When a Split Tunnel connection detects you are accessing company resources (shared folders on a server, your email client) it directs your traffic over the VPN connection. When it detects you are opening a web page, it routes your traffic through the "regular" internet connection and is NOT using the VPN.


Quote:
Also, when I'm connected both to my ISP and my VPN. Both state they have internet access under network settings. Now, when I IPCONFIG, I can see my IP address my local router is given me and I can see my IP address the VPN router has given me. Playing around, I disabled my LAN internet connection(ISP) and I could still surf the internet. I IPCONFIG and I see no IP information at all. But I'm surfing the internet. This is what is confusing me.
Yea that's confusing me and Macroy, as well.
As he said, if you disable your LAN connection it will disable everything. You can't do anything without that.

You aren't using wireless, correct?
Reply With Quote Quick reply to this message
Please register to post and access all features of our very popular forum. It is free and quick. Over $68,000 in prizes has already been given out to active posters on our forum. Additional giveaways are planned.

Detailed information about all U.S. cities, counties, and zip codes on our site: City-data.com.


Reply
Please update this thread with any new information or opinions. This open thread is still read by thousands of people, so we encourage all additional points of view.

Quick Reply
Message:


Over $104,000 in prizes was already given out to active posters on our forum and additional giveaways are planned!

Go Back   City-Data Forum > General Forums > Science and Technology > Computers
Similar Threads

All times are GMT -6. The time now is 08:07 PM.

© 2005-2024, Advameg, Inc. · Please obey Forum Rules · Terms of Use and Privacy Policy · Bug Bounty

City-Data.com - Contact Us - Archive 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37 - Top