Surf outside Internet through VPN

[Dunc]

Darren Pilgrim wrote:
> Noah Silverman wrote:
>> I want to find a way to pass ALL traffic from my laptop THROUGH my 
>> office VPN and then out to the Internet.  This is a "road warrior" 
>> setup. This gives me a few benefits:  1) I can check my email
>> securely  through VPN.  2) No matter where I am, I will always have
>> the external  IP of my VPN server when accessing the web.
>>
>> I have setup a VPN.  Was able to get it working with either tun or
>> tap  interfaces.  That part seems OK.
>>
>> Now what??  (I can see and connect to the VPN server with '10.0.8.1' 
>> easily.  I can't see or connect to the outside world.)  Do I need to 
>> add some kind of special route in the routing table?
>
> If you can talk to arbitrary hosts on your office network--not just
> the VPN server--setting your default router to the office's gateway
> will achieve what you want.
> _______________________________________________

If you meant the internal address of the office's gateway, then changing
the default route to that means that you will no longer be able to reach
the public IP of the VPN peer.

What you need to do is,

i) Add a host route to the VPN peer address, via your current default
gateway on whatever network you happen to be on
ii) Change your default route to be something on your office net that is
willing to router traffic out the Internet for you. This potentially
could the internal address of your office firewall, if it knows how to
route back to you via the VPN terminating box. Alternatively just the
other end of your tunnel, I'm guessing from the above that it's '10.0.8.1'


If you're using OpenVPN, then the "redirect-gateway" directive tries to
do the above for you.

Cheers,

Dunc