PPTP VPN Settings

[chris.paluch]

I have setup a PPTP VPN connection to my Cisco router, and it is working, but not completely. Is there a way that when someone connects they can query our internal DNS server for address resolution? Also when they connect, they can no longer browse the Internet, since the a route statement directs everything into the VPN. Is there a way to setup split tunneling?

Thanks.

[gfullage · Accepted solution]

For the DNS resolution, use the following commands under the Virtual-Template int (or whatever int you're using):

ppp ipcp dns x.x.x.x y.y.y.y

ppp ipcp wins a.a.a.a b.b.b.b

As you can see, this will pass down the DNS and WINS servers to the client, obviously x.x.x.x will be your internal DNS server. You can add y.y.y.y if you have a backup DNS, if not don't put it in.

As for split tunnelling, there's no concept of split tunnelling in the PPP protocol, it's basically all or nothing. You can add a static route for the internal network pointing to the negotiated IP address, but there's no way to know the IP address until the tunnel is built, so it's not overly user friendly.

See http://www.cisco.com/warp/customer/707/pptp.shtml#add5 for details.