Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Wanted to move a bunch of VPN configs (including vpn-via-vpn-via-vpn scenarios) to existing Win7 installation under VMware. So the actual title is: "IPRouterEnable in virtualized Windows 7: how to redirect traffic, coming to VM, to VPN connection open at VM?"

There's a NAT configured at vmware, network, the experimental Win7 VM at can connect to VPN, is available from host os and can run a proxy service available from outside.

Next, wanted it to route request;

  • set IPRouterEnable to 1, reboot'd, ipconfig /all shows that routing is enabled.
  • route add default gw dev vmnet8
  • ping was ok (no IP loop), and proxy is still available from outside

How can I tell Win7 to forward all incoming requests via established VPN connection? Or, is this a routing problem in host os (Linux)?

share|improve this question

For this to work properly, you would need to use a Bridged Network interface with your vmware guest, in order to get the external traffic passed IN to your guest OS. The NAT is generally not a one-to-one NAT in vmware, thus inbound traffic that is not part of an established TCP session is dropped with nowhere to go.

You may possibly be able to achieve what you're trying to do with a combination of VMware networking options (Host Only + NAT) and iptables.

Here is a how-to for setting up your Linux host OS as a router for your vmware guests. You may be able to sufficiently modify it to allow external traffic to share one guest's VPN connection.

These rules for sharing a Windows VPN connection using the windows Loopback Device, to a Linux host, might be applicable as well.

share|improve this answer
I will try using loopback, 'Packets go to the guest IP and are routed in the guest via the loopback (where ICS performs NAT on the source IP) to the VPN interface, back out via the LAN interface, through your LAN and across the Internet to the remote VPN gateway and hence into the remote network' sounds promising. – kagali-san Feb 12 '11 at 18:23

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.