Windows – Allow Internet Access with Default Gateway on Windows 7 VPN Server

vpnwindows

I have a Windows 7 box at home (which I'll refer to as Home-VPN) that runs a simple PPTP VPN server. I have a range of 2 IP address (192.168.1.10-192.168.1.11) to give out, although the server is only able to give out one concurrent connection. Ports 1723 & 47 are correctly forwarded to the server. IPv6 is disabled on both Home-VPN and the client. I setup Home-VPN just like this Youtube video: http://www.youtube.com/watch?v=1s5JxMG06L4

I can connect to it just fine but I can't access the Internet when connected to Home-VPN, all outside web servers (eg. google.com, mozilla.org, apple.com) are unreachable.

I know I can uncheck "Use Default Gateway on Remote Servers" on the client side under IPv4 settings but that will route all my traffic through my current connection, rather than through the VPN, defeating the purpose of said VPN.

Any ideas on how I can fix this?

Best Answer

Based on your update, you need to assure that the VPN server provides the clinet with an IP and a default gateway and likley DNS server addresses. What happens if you allow the VPN client to receive an address via DHCP rather than assigning the two you have? Can you confirm that the 192.168.1.10 &.11 addresses are on the local subnet which contains the gateway that the host system uses?

Related Solutions

IPhone PPTP cannot use VPN DNS server

I found the same problem, it looks like a bug on iPhone's handling of PPTP. It works if you configure PPTP to assign DNS servers which are globally reachable (eg: Google's 8.8.8.8), but not if the DNS are within the VPN themselves.

A workaround is to setup an address like 8.8.8.8, and then intercept and redirect the traffic on the server side (in my case, with iptables).

Windows VPN – Fixing Error 619 Connection Issues

I've finally found the holy grail:

http://www.jcsilva.com/2011/01/09/issues-with-dd-wrt-gre-forwarding-pptp/

This page says the following:

Issues With DD-WRT GRE Forwarding PPTP

A quick fix for DD-WRT not forwarding GRE PPTP packets.

Add the following commands to the startup commands (Administration->Commands):

/sbin/insmod xt_connmark
/sbin/insmod xt_mark
/sbin/insmod nf_conntrack_proto_gre
/sbin/insmod nf_conntrack_pptp
/sbin/insmod nf_nat_proto_gre
/sbin/insmod nf_nat_pptp

As a side note, I'm not sure why the Professional machine was able to connect correctly and at this point I don't really care now that I have a real solution that isn't enabling the DMZ.

Best Answer

Related Solutions

IPhone PPTP cannot use VPN DNS server

Windows VPN – Fixing Error 619 Connection Issues

Related Question