Is there a limit or problem trying to have two VPNs opened at the same time. I'm trying on my laptop with Windows XP establish two VPNs at the same time but when I connect to the 2nd VPN (China) I can't see out to the net nor anything from the 1st VPN (USA) only traffic from the second VPN (China).

Any answers?

You can have multiple VPN's on a host but they can possibly conflict with the IP given to the loopback address of the VPN and the routing designed for that VPN.

maybe split tunneling is not allowed on one of them? Windows VPN or Cisco or what ?

In answer to your question, you can run 2 VPNs at the same time provided the subnets don't over lap.

However, to answer this problem it could be your router stopping you from having 2 VPNs. There's a common problem with GRE that prevents 2 VPNs from being established.

They are both windows VPNs. I have a netgear router which supposely allows VPN configuration. Would it be better to try and set them up there?

How do I set up split tunnelling and verify routing addresses.

There's a common problem with GRE that prevents 2 VPNs from being established.

It's a netgear dg834 if that's any help. When in Australia I work from home and that is my router I'm using.

needs more info on how you have it set up including ip's etc

you should be able to do it though.. run win server in a virtual machine

xp only allows 1 vpn connection i believe

Chances are any router that isn't a Cisco built bajillion dollar job won't support multiple PPTP VPNs.

especially if its a s*** netgear cheapy

they open up dual VPNs on 24 all the time.

make sure you disable this under properites
Networking
Internet Protocol
Advance

http://img153.imageshack.us/img153/9039/vpnnn9.th.jpg


last edited by TiT at 19:24:34 18/Feb/09

they open up dual VPNs on 24 all the time.

Yep, they need Chloe and the purple-shirted Chloe-clone to open up 'sockets' ALL THE TIME.

sounds a bit like your china config sets a default route so as soon as you connect it up you're trying to send everything up that vpn

you shouldn't have any issue running up multiple windows vpn clients, I've done it before with XP - specifically via pptp. you certainly won't have any issue with multiple vpn's using openvpn, I'm doing it right now

yeh just tested this and it works fine
fired up pptpd on a server in brisbane and a server in sydney, made two new vpn connections using the windows client, connected them both up and away they go

http://jason.qgl.org/images/ms-pptp.jpg

Jim and everyone else,

Thanks, much appreciated. Shall follow through with your suggestions and see how I go.

Cheers

What would you do if you had a million dollars?

it will also establish the second VPN using the default route of the first vpn, which may not work depending what software you're using

vmware imo - at telstra when working from home we're forced to use some crappy citrix & nortel vpn client which is totally aids, can't do much else on the pc while connected
so its easier to just fire up a vm

it will also establish the second VPN using the default route of the first vpn, which may not work depending what software you're using

I included the output of route print in my screenie to show that's not the case

yeah but his client might not be that smart; windows client will always know which address is the real address
3rd party software might just try and establish connection to his end point - which would just be treated as tcp traffic on the first vpn


@op are you using windows vpn or something else?

omgread

it will also establish the second VPN using the default route of the first vpn, which may not work depending what software you're using

Only if his default route changes. Also, the second VPN is being established and works, its the first that stops working which points to the GRE problem. The router sounds like it only supports 1 PPTP pass through.

possibly, but that shouldn't stop his normal interweb traffic from working as well - but a new default route pointing up the china vpn probably would

How do I set up split tunnelling and verify routing addresses.

SFB.. how the hell did you get your job without already knowing the answer to that question. I know you guys don't know how to fix a bloody computer anymore, but seriously dude... WTF!

if all else fails... virtual servers!

Mate, VPNs are not my problem. Even though I have set up all the VPNs I use for each client on my laptop I have never needed two connected at the same time. So I haven't encountered the problem before and thus never needed to know how to or what to configure for two. I am a user of VPNs not an Network Architect or Network Tech. My field of expertise is Business Analysis, Project Management and Software Engineering.

I have better things to do with my time than worry about VPNs and the multiplicity of configurations and inplementations. That's for detail people. I have things like $3.3million implementation projects to worry about than learn everything about setting properties to a piece of VPN software. Now if you think that's hard try doing that whilst listening to and trying to speak bloody chinglish if you're lucky to find someone who even knows that.

The only reason I need two for the first time ever is becuase of the security overload by the Chinese. I cannot work on their system remotely from anywhere in the world without first having a VPN to allow them to desktop share my desktop through our corporate web conferencing application which allows them to watch what the f..k I do remotely.

Yes, I have someone in China sitting at a screen watching my Desktop as I go about travelling between SAP and our Asset Performance Management System and identifying the gaps requiring customisation in Business Processes, Work Flow Managemement, Work Cycles and Work Practices of China's State Petroleum and Chemical Company, Sinopec, owner of roughly 29,000 service stations in China, their largest Oil refinery and Checmical company and the 16th largest company in the world. All to manage an average 100,000 asset pieces per plant and refinery in the 100's Sinopec own, The goal being increased productivity, effeciency and output at a lower operating cost for each plant and refinery.

Yeah right, I need to understand VPNs to do my pissy job.

last edited by Some Fat Bastard at 01:35:09 19/Feb/09

oh boy there's gonna be a pm for you now

lol, by the way thanks heaps for the help Jim.

no wukkaz

Yes, I have someone in China sitting at a screen watching my Desktop

u should arrange your desktop icons into amusing shapes, like in this
http://www.thewebsiteisdown.com/

share the VPN via Windows ICS and have another machine connect via your existing VPN. Then when they are watching your PC do nothing you can be hacksawing them!

Seriously ara, if you come in here talking about hacksawing I wonder how you can even do your job.

Dammit jim, you accidentally blanked out the interesting bit on your screeny.

:D

what job?