Cross Connection not working with VPN

Started by giodep, March 30, 2020, 01:31:36 PM

Previous topic - Next topic

giodep

Hi all,
I have a pc (PC1) with two LAN cards; the first card is connected to intranet 192.168.1.0 where Internet is reached as well as, meanwhile the second card is connected with CROSS cable to another pc (PC2) using subnetwork 192.168.0.0.
Ping and folder sharing work fine between PC1 and PC2.

This is route print:


Afterwards I created VPN with cisco anyconnect using first network card of PC1 and ping and folder sharing doesn't work anymore.
In this scenario route print is:

I tried to add following route:
route ADD 192.168.0.0 mask 255.255.255.0 192.168.0.1 IF 12
and delete route:
route DELETE 0.0.0.0 mask 0.0.0.0 10.2.3.1
without success.
Any suggestion?

thank in advanced
gio

deanwebb

My question is if the anyconnect is blocking the file/print access with the VPN active as a security measure, so that the PC1 doesn't route PC2 traffic into the VPN environment.
Take a baseball bat and trash all the routers, shout out "IT'S A NETWORK PROBLEM NOW, SUCKERS!" and then peel out of the parking lot in your Ferrari.
"The world could perish if people only worked on things that were easy to handle." -- Vladimir Savchenko
Вопросы есть? Вопросов нет! | BCEB: Belkin Certified Expert Baffler | "Plan B is Plan A with an element of panic." -- John Clarke
Accounting is architecture, remember that!
Air gaps are high-latency Internet connections.

Otanx

Does the VPN settings allow for split tunneling? That is commonly disabled, but would be required for this to work.

-Otanx

Dieselboy

I'm also wondering if the "allow local lan access" is required.

icecream-guy

Quote from: Dieselboy on March 30, 2020, 11:53:42 PM
I'm also wondering if the "allow local lan access" is required.

aka Split tunnelling
:professorcat:

My Moral Fibers have been cut.

Dieselboy

Quote from: ristau5741 on March 31, 2020, 02:24:43 PM
Quote from: Dieselboy on March 30, 2020, 11:53:42 PM
I'm also wondering if the "allow local lan access" is required.

aka Split tunnelling

Yes sort of, but even if you have split tunneling set up (where split tunneling means that the default gateway is still the local machines local lan, and not the remote tunnel endpoint); you can prevent/enable access to the local LAN with that option.