Home > Ask the Networking Experts > VPNs with Lisa Phifer Questions & Answers > Understand your VPN client/server configuration for troubleshooting
Ask The Networking Expert: Questions & Answers
EMAIL THIS

Understand your VPN client/server configuration for troubleshooting

Retired Expert - Inderpreet Singh EXPERT RESPONSE FROM: Retired Expert - Inderpreet Singh

Pose a Question
Other Networking Categories
Meet all Networking Experts
Become an Expert for this site


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


>
QUESTION POSED ON: 26 August 2003
My Wife and I connect into work via VPN software (Nortel's Contivity VPN Client). She has a laptop (Win2k) that is used both at work and home. I use our home PC (WinXP Pro). I have two printers connected to the home PC that are shared in XP. We have a basic wired 10/100 Base-T network to plug the laptop in. The network is simply a Linksys BEFSX41 VPN/firewall/router connected to the cable modem and cat5 cables for the laptop and PC.

When the laptop is plugged into the network (but not on the VPN), it can send things to the printer just fine. However, if either the laptop or the home PC (or both) is logged into the VPN, the laptop cannot print locally. The home PC can always print fine. I am assuming it is because the VPN tunnel starts at the computer itself so the shared printers are "outside" the tunnel that the laptop sees.

I thought about getting a basic print server to connect the printers directly to the router instead of sharing them, but I am guessing that the same problem will exist. Is my assumption correct? The Nortel VPN software is the required way to connect to work, so I cannot use the VPN endpoint that is already part of the router for this, which I believe would be one way to solve the problem. This seems to come down to how to leave the home LAN open for use while also using the VPN LAN remotely at work. Any suggestions on how to resolve this issue?


>
EXPERT RESPONSE
Essentially there could be two reasons for the problem you are experiencing and the way to debug it further is simple if you know your work network's IP addressing scheme or the configuration of your VPN client.

The first potential reason you are losing connectivity to your home printers is because of the infamous "double nat" problem. The standard IP address range that the DHCP server built into Linksys home routers is 192.168.1.0/24. It is possible that your office network serves addresses from the same subnet and is NATing those addresses out the Internet. Once a VPN connection is established from your PC, typically the clients learn routes to the central office network over the tunnel and when your PC is trying to access the printer for your home network the traffic is really going out towards the corporate network because that route will take precedence. The simple solution to this problem is to simply reconfigure your Linksys router to provide IP addresses to your PC's and printers that are not from the same subnet that may exist in your corporate network. I have run into the same exact problem at home while testing the Chantry Networks Beaconworks WLAN solution and its integration with our corporate VPN client. Knowing the corporate network IP addressing scheme and the home network addressing scheme will make this problem (and solution) obvious.

There is a possibility in your case that the addressing scheme is not the issue. Your home network and your corporate network addresses may come from totally disparate subnets. Now it is important to understand your VPN client/server configuration. VPN clients (and I know Nortel's client has this feature) come with a feature called "split tunneling." If "split tunneling" is DISabled then all your traffic is being forced out the tunnel and no traffic is able to get to your home network. The obvious solution to this is to request that split tunneling be enabled. Corporations prefer to disable split tunneling as it gives them the sense of security that sessions will not be hijacked or they like to monitor the type of traffic and utilization of the remote workers. If it is indeed the case that split tunneling is disabled there is no harm in asking for a change in the configuration. If that is not possible, then there is no easy solution as you will need to work within the security policy of your corporation. Simply put, you will have to disconnect the VPN when you want to print.


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


RELATED CONTENT
VPNs with Lisa Phifer
Would you consider a Microsoft VPN tunnel through a WEP encrypted access point to be secure?
I've heard rumors that some service providers can see unencrypted VPN traffic of their customers. Is this true?
I need to select a Cisco ADSL router which is capable of acting as a VPN server for Microsoft VPN clients that come through the Internet.
I am having issues with the IKE communication between the two Cisco VPN concentrators.
What about using SSL VPN with e-mail clients?
Can you have two VPN connections to the same machine simultaneously?
Why can't I access my folders on the server through the VPN?
I need a very basic VPN solution to connect two offices to allow two servers to talk to one another.
After setting up my wireless router, I can no longer get on the VPN.
Can one use VPN over a peer-to-peer network within a home?

VPN Troubleshooting
How to maintain corporate VPN connection while printing to a private network.
Can I set up a VPN on my wireless router?
How can I get our VPN to work on Windows Vista?
To set up a VPN server, do you need two NIC cards?
How do I connect to our VPN with authentication ID?
What causes my overseas VPN connection to slow during the day?
Why has the terminal server ended my connection?
How can I access each device from my network while keeping the companies' networks secure?
VPN operating system interoperability -- Configure VPNs with Windows, Checkpoint
VPN operating system interoperability -- configure VPNs with Unix

RELATED GLOSSARY TERMS
Terms from Whatis.com − the technology online dictionary
virtual systems management  (SearchNetworking.com)
VPN appliance  (SearchNetworking.com)

RELATED RESOURCES
2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
Search Bitpipe.com for the latest white papers and business webcasts
Whatis.com, the online computer dictionary



Search and Browse the Expert Answer Center
Search and browse more than 25,000 question and answer pairs from more than 250 TechTarget industry experts.
Browse our Expert Advice



Expert networking advice and tips for IT professionals
Visit KnowledgeStorm's comprehensive and easy to use business white paper directory.
HomeNewsTopicsITKnowledge ExchangeTipsAsk the ExpertsMultimediaWhite PapersNetworking Product Trials
About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
SEARCH 
TechTarget provides enterprise IT professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective IT purchase decisions and managing their organizations' IT projects - with its network of technology-specific Web sites, events and magazines.

TechTarget Corporate Web Site  |  Media Kits  |  Reprints  |  Site Map




All Rights Reserved, Copyright 2000 - 2008, TechTarget | Read our Privacy Policy
  TechTarget - The IT Media ROI Experts