Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I use VPN from home to work with my company network. This is what I want to achieve:

  • I don't want any packet with IP address outside this VPN network (or simpy, with IP outside private networks address range) to leave my computer. How can I do that?

So, the VPN is not really important. More precisely (and general), I want configure my network in such way, that no packet with IP destination address outside local network will leave my computer.

The ideal solution would be to route this "external packets" through my primary (raw) ISP connection and "local packets" through VPN connection. Is it possible?

UPDATE: My computer operates under Windows XP SP3 and I use 'built in' support for VPN in Win XP.

share|improve this question
Which operating system are you on, which VPN software are you using? – Chopper3 Feb 8 '10 at 16:15
What's the VPN software on the server side? Have you verified that this isn't already how it works? I know Cisco's VPN stuff supports split tunneling so unless the range is within the routed block(s) it will go over your local connection. – maik Feb 8 '10 at 16:30
up vote 1 down vote accepted

Yes, a lot of people do it this way. Their local/home connections egress directly to the internet, and the network traffic for their company network goes over the VPN. You need to uncheck the VPN setting "use the default gateway on remote network". On the General Tab of the VPN connection > TCP/IP settings.

share|improve this answer
+1 Greg. I believe this is called 'split tunneling'. – Chris Thorpe Feb 8 '10 at 20:40

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.