How to fulfill split tunnel for Windows native VPN with IKEv2?

Zyxel_James
Zyxel_James Posts: 663  Zyxel Employee
Zyxel Certified Network Administrator - Security Zyxel Certified Network Administrator - Nebula Zyxel Certified Sales Associate 100 Answers

Question:
How to fulfill split tunnel for Windows native VPN with IKEv2?

Answer:
In the current design, Windows native VPN interface can't separate Internet traffic from VPN tunnel.
The only way to fulfillit is to create an additional routing on your PC.

Disable PC default gateway from your VPN interface.
1.Go to Control Panel > Network and Sharing Center > Change Adapter Settings, and open Properties .
2.Go to Networking > Internet Protocol Version 4 (TCP/IPv4) > Advanced, and disable the option "Use default gateway on remote network"
3. Create addtional routing for your VPN traffic.
C:\Windows\system32>route.Add 192.168.1.0 mask 255.255.255.0 100.100.100.1

After you complete the steps above, only the traffic toward to the local interface will go through the tunnel.

Tagged: