[vpn-help] VPN IPsec issue

[Kevin VPN]

On 08/14/2011 03:07 AM, alex razgul wrote:
>
> I use  server (Windows 2008) which is located in dataCenter, so I have to
> operate via RDP.
>
> When I establish VPN connection I lose access to the server.
>
> I think it happens because of the VPN client. I suspect It applies IPsec
> policies to all trafic.
>

Hi Alex,

Just to clarify, the server you are trying to access is in a different 
network than the one you are connecting to with the VPN, correct?  If 
so, your loss of access to the server could be because of policies as 
you say.

It is possible in Shrew to define what addresses are included in the VPN 
tunnel or not.  In the Site Configuration dialog, go to the Policy tab. 
  Uncheck "Obtain Topology Automatically or Tunnel All".  Then use the 
Add button to manually enter the addresses you want to go through the 
tunnel (Include) and those you don't (Exclude).

I would suggest you simply do an Include for your corporate network 
addresses.  Anything not specified in the Include statement is 
implicitly Excluded.

I believe though that some VPNs push a policy configuration down to the 
client regardless of the local client settings.  If you VPN is like 
that, then this will not work.