ASP Developer Network - Brought to you by Steve Radich and BitShop, Inc. - http://www.bitshop.com

ASPDeveloper

ASPDeveloper.Net / VirtualServerFAQ.COM

Make sure you go to our home page for:

* Virtual Server 2005 FAQ
* ASP.Net 2.0 Information
* ASP.Net 2.0 Streaming Tutorials
* ASP.Net 2.0 HTML based Tutorials

Made possible by Business Internet Technology Shop (BitShop)

Virtual PC

Recent Virtual PC posts

* Backup online
* HBA support
* Cannot boot XP CD to install OS (Newbie)
* Shared virtual disk problem
* VPC 7 - XP PRO - started getting delayed write failures.
* XP will not load
* Virtual Machine removed
* Anyone running Virtual PC on XP Home?
* newbie question
* Files on shared folders being appended n not overwriten
* Connecting to SQL Server running on host operating system from Virtual PC session
* Install NT4 Server Failure
* error while trying to install
* Can"t find Monitor Driver
* PRB: VPC 2004 SP1- VMs freezes on a short periods of time on lapto
* Can"t run program
* virtual pc and advanced server
* Cannot Ping Between Virtual Workstations
* NTLDR not found - what happened?
* -Singlepc and save state

Add Solution

VPN Host versus Guest

Source: microsoft.public.virtualpc
Sent: 12/10/2004
From: John Bennett
Message:

I use a WindowsXp Pro host with VPC 2004 SP1. Guest OS are either
Windows2000 Pro or WindowsXp Pro. I have a single Intel NIC that is
connected to a router for internet and peer to peer network access.

The problem I am having may not be VPC but this seemed like a good place to
ask.

If I start the VPN client (Nortel) on the host to access business network;
then VPC guests lose access to internet and peer to peer connections.

If I start VPN client on one or more guests; then the host can access both
internet and peer to peer connections.

So the problem I see is that with corporate VPN client on host I lose
internet and peer to peer acces from guest OS.

Is there a solution that would allow the VPN client on the host and all
guests behave as the do when the VPN client is not running on the host?

Post Reply | This is Spam! | Mark as Spam

Related Messages

Re: VPN Host versus Guest

Sent: 12/11/2004
From: "neo [mvp outlook]" <(email address - cut out)>
Message:

What you are asking about is called split tunneling. This is something that
is controlled by the VPN appliance (server side) and most will not configure
this option because it opens up a security hole. So the safe answer is no,
there is nothing you can do on the client side that would allow what you
want.

/neo

"John Bennett" <(email address - cut out)> wrote in message
news:(email address - cut out)...

Show quoted text

>I use a WindowsXp Pro host with VPC 2004 SP1. Guest OS are either
> Windows2000 Pro or WindowsXp Pro. I have a single Intel NIC that is
> connected to a router for internet and peer to peer network access.
>
> The problem I am having may not be VPC but this seemed like a good place
> to
> ask.
>
> If I start the VPN client (Nortel) on the host to access business network;
> then VPC guests lose access to internet and peer to peer connections.
>
> If I start VPN client on one or more guests; then the host can access both
> internet and peer to peer connections.
>
> So the problem I see is that with corporate VPN client on host I lose
> internet and peer to peer acces from guest OS.
>
> Is there a solution that would allow the VPN client on the host and all
> guests behave as the do when the VPN client is not running on the host?

Re: VPN Host versus Guest

Sent: 12/11/2004
From: "Robin Walker" <(email address - cut out)>
Message:

John Bennett <(email address - cut out)> wrote:

This results from the configuration of the VPN client program, which makes
the host's default gateway the VPN link to your business network. Sometimes
it is possible to configure VPN clients to do split-tunnelling when only
business-related traffic goes down the VPN link, but that configuration
control might rest with your business network administrators. They might
not permit split-tunnelling.

How do you have the VPC's network configured? The above is what I would
expect if you had "Shared Networking" configured. What happens if you
configure the VPC virtual network cards to be your physical host NIC (i.e.
virtual switch).

--
Robin Walker
(email address - cut out)

Show quoted text

> I use a WindowsXp Pro host with VPC 2004 SP1. Guest OS are either
> Windows2000 Pro or WindowsXp Pro. I have a single Intel NIC that is
> connected to a router for internet and peer to peer network access.
>
> The problem I am having may not be VPC but this seemed like a good
> place to ask.
>
> If I start the VPN client (Nortel) on the host to access business
> network; then VPC guests lose access to internet and peer to peer
> connections.
> If I start VPN client on one or more guests; then the host can access
> both internet and peer to peer connections.
>
> So the problem I see is that with corporate VPN client on host I lose
> internet and peer to peer acces from guest OS.
>
> Is there a solution that would allow the VPN client on the host and
> all guests behave as the do when the VPN client is not running on the
> host?

Re: VPN Host versus Guest

Sent: 12/11/2004
From: John Bennett
Message:

All my guests have the Network Adapter configured as the real NIC.

I tried both Shared and Local but this did not help.

I also see the option of selecting the Nortel miniport in the guest setting
but this is a problem if the host is not running the Nortel client.

"Robin Walker" wrote:

Show quoted text

> John Bennett <(email address - cut out)> wrote:
>
> > I use a WindowsXp Pro host with VPC 2004 SP1. Guest OS are either
> > Windows2000 Pro or WindowsXp Pro. I have a single Intel NIC that is
> > connected to a router for internet and peer to peer network access.
> >
> > The problem I am having may not be VPC but this seemed like a good
> > place to ask.
> >
> > If I start the VPN client (Nortel) on the host to access business
> > network; then VPC guests lose access to internet and peer to peer
> > connections.
>
> This results from the configuration of the VPN client program, which makes
> the host's default gateway the VPN link to your business network. Sometimes
> it is possible to configure VPN clients to do split-tunnelling when only
> business-related traffic goes down the VPN link, but that configuration
> control might rest with your business network administrators. They might
> not permit split-tunnelling.
>
> > If I start VPN client on one or more guests; then the host can access
> > both internet and peer to peer connections.
> >
> > So the problem I see is that with corporate VPN client on host I lose
> > internet and peer to peer acces from guest OS.
> >
> > Is there a solution that would allow the VPN client on the host and
> > all guests behave as the do when the VPN client is not running on the
> > host?
>
> How do you have the VPC's network configured? The above is what I would
> expect if you had "Shared Networking" configured. What happens if you
> configure the VPC virtual network cards to be your physical host NIC (i.e.
> virtual switch).
>
> --
> Robin Walker
> (email address - cut out)
>
>
>

Re: VPN Host versus Guest

Sent: 12/11/2004
From: John Bennett
Message:

I need to get a better understanding of split tunneling as I am not sure how
this explains the difference whether the host or any one or more clients is
running the client. All my guests are configured to use the real NIC.

"neo [mvp outlook]" wrote:

Show quoted text

> What you are asking about is called split tunneling. This is something that
> is controlled by the VPN appliance (server side) and most will not configure
> this option because it opens up a security hole. So the safe answer is no,
> there is nothing you can do on the client side that would allow what you
> want.
>
> /neo
>
>
> "John Bennett" <(email address - cut out)> wrote in message
> news:(email address - cut out)...
> >I use a WindowsXp Pro host with VPC 2004 SP1. Guest OS are either
> > Windows2000 Pro or WindowsXp Pro. I have a single Intel NIC that is
> > connected to a router for internet and peer to peer network access.
> >
> > The problem I am having may not be VPC but this seemed like a good place
> > to
> > ask.
> >
> > If I start the VPN client (Nortel) on the host to access business network;
> > then VPC guests lose access to internet and peer to peer connections.
> >
> > If I start VPN client on one or more guests; then the host can access both
> > internet and peer to peer connections.
> >
> > So the problem I see is that with corporate VPN client on host I lose
> > internet and peer to peer acces from guest OS.
> >
> > Is there a solution that would allow the VPN client on the host and all
> > guests behave as the do when the VPN client is not running on the host?
>
>
>

Re: VPN Host versus Guest

Sent: 12/12/2004
From: "Bill Grant" <not.available@online>
Message:

When you mke a VPN connection to a remote server, you set up a tunnel
through the Internet to that server. Most VPN clients (including the
Microsoft VPN client) make this tunnel the default route for your client.
This means that all traffic which is not in the local IP subnet (which is
handled by the NIC) is sent through the VPN tunnel to the remote server, not
to the Internet.

Split tunnelling is a way to change this behavior. You can modify the
routing so that some traffic will not go through the tunnel, but will be
sent directly out to the Internet. You have split the tunnel, letting some
traffic leak out. With the Microsoft VPN client, you achieve this by
clearing the "use default gateway.." box in the connection properties. The
default route to the Internet is retained, and only a subnet route set up
for traffic going through the tunnel. Not sure if or how the Nortel client
handles this.

"John Bennett" <(email address - cut out)> wrote in message
news:(email address - cut out)...

Show quoted text

>I need to get a better understanding of split tunneling as I am not sure
>how
> this explains the difference whether the host or any one or more clients
> is
> running the client. All my guests are configured to use the real NIC.
>
> "neo [mvp outlook]" wrote:
>
>> What you are asking about is called split tunneling. This is something
>> that
>> is controlled by the VPN appliance (server side) and most will not
>> configure
>> this option because it opens up a security hole. So the safe answer is
>> no,
>> there is nothing you can do on the client side that would allow what you
>> want.
>>
>> /neo
>>
>>
>> "John Bennett" <(email address - cut out)> wrote in message
>> news:(email address - cut out)...
>> >I use a WindowsXp Pro host with VPC 2004 SP1. Guest OS are either
>> > Windows2000 Pro or WindowsXp Pro. I have a single Intel NIC that is
>> > connected to a router for internet and peer to peer network access.
>> >
>> > The problem I am having may not be VPC but this seemed like a good
>> > place
>> > to
>> > ask.
>> >
>> > If I start the VPN client (Nortel) on the host to access business
>> > network;
>> > then VPC guests lose access to internet and peer to peer connections.
>> >
>> > If I start VPN client on one or more guests; then the host can access
>> > both
>> > internet and peer to peer connections.
>> >
>> > So the problem I see is that with corporate VPN client on host I lose
>> > internet and peer to peer acces from guest OS.
>> >
>> > Is there a solution that would allow the VPN client on the host and all
>> > guests behave as the do when the VPN client is not running on the host?
>>
>>
>>

Post Reply | This is Spam! | Mark as Spam

Other groups

Virtual PC (Mac)(3592)	Virtual PC(12844)	Virtual PC (French)(496)
Virtual Server 2005(6245)

Our Sponsors

Virtual Server 2005 Info Here!
http://www.aspdeveloper.net

Wiki

Blogs

Articles

Image galleries

File galleries

Forums

Maps

Directories

ASP Developer Network (since 1996) - Brought to you by Steve Radich and BitShop, Inc. - http://www.bitshop.com
Copyright © 1997-2005 by BitShop, Inc. All Rights Reserved.
No content may be reproduced in any form without written permission from BitShop, Inc.
We will be honored to assist with reproduction rights on our material if you contact us.
We also can provide print articles for your magazine, private training seminars at your site, and conference presentations.
Thank you for visiting. Please bookmark our site if you found it useful!
If you wish to make a donation it will help further the development of these free resources: