How do i tell if all traffic is going though the vpn?OpenVPN working - but how to route all traffic down it?How to force all traffic through VPN?OpenVPN running on Internet Gateway, so all private clients can access VPN with no configHow do I route all traffic from clients connected to the DD-WRT to its OpenVPN tunnel tun0?How to config private IPs for IPMI using VPN?Routing all traffc though OpenVPN on WindowsOpenVPN on Windows 10 without redirect-gateway option, or with options just to handle VPN traffichow to force all internet traffic go through my vpn tunnelOpenVPN Access Server - How Do You Route All Client Traffic Through The VPN?Rredirect Internet traffic to VPN Server (all traffic)

How dangerous are set-size assumptions?

Why aren't cotton tents more popular?

Can ADFS connect to other SSO services?

Can any NP-Complete Problem be solved using at most polynomial space (but while using exponential time?)

How is hair tissue mineral analysis performed?

Unusual mail headers, evidence of an attempted attack. Have I been pwned?

Can we put equal sign after aggregate functions in sql?

First-year PhD giving a talk among well-established researchers in the field

Tantum religio potuit suadere malorum – Lucretius

Loss of power when I remove item from the outlet

Hot coffee brewing solutions for deep woods camping

Sci fi short story, robot city that nags people about health

Where can I find Intensity vs Observed wavelength graphs?

As a fresh graduate, should I get my first credit card?

Do I have any obligations to my PhD supervisor's requests after I have graduated?

Should developer taking test phones home or put in office?

C-152 carb heat on before landing in hot weather?

Swapping rooks in a 4x4 board

What are the penalties for overstaying in USA?

Can Ogre clerics use Purify Food and Drink on humanoid characters?

I am completely new to Tales from the Floating Vagabond, how do I get started?

Interaction between Leyline of Anticipation and Teferi, Time Raveler

Reused Nested Decision Logic - CTE vs Copying Code

Why doesn't a marching band have strings?



How do i tell if all traffic is going though the vpn?


OpenVPN working - but how to route all traffic down it?How to force all traffic through VPN?OpenVPN running on Internet Gateway, so all private clients can access VPN with no configHow do I route all traffic from clients connected to the DD-WRT to its OpenVPN tunnel tun0?How to config private IPs for IPMI using VPN?Routing all traffc though OpenVPN on WindowsOpenVPN on Windows 10 without redirect-gateway option, or with options just to handle VPN traffichow to force all internet traffic go through my vpn tunnelOpenVPN Access Server - How Do You Route All Client Traffic Through The VPN?Rredirect Internet traffic to VPN Server (all traffic)






.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty margin-bottom:0;








4















I have a openVPN set up on the server and I am using openVPN connect for my client. I have some internal websites that I need to access and some of them don't work. I want to make sure that when the traffic is going through the VPN and not though the normal internet connection.
The gateway ip for my network is 192.168.0.1 and the gateway for openVPN is 10.8.0.1. I have done trace route and it shows that the websites that don't work access 192.168.0.1 and not 10.8.0.1. Is this proof that it is not going though the VPN?










share|improve this question






















  • It's not really an answer, so I will comment instead. Two things you need to check 1- What are your DNS ipconfig /all if you do not even have a DNS that can resolve your website internally, then you have a problem. 2- Check your routes route print is your Internal websites IP routed towards the Tunnel.

    – Alex
    Feb 18 '13 at 20:57











  • His question answers part of your comment already. DNS resolution is working fine because packets are being sent out.

    – gparent
    Feb 18 '13 at 20:58

















4















I have a openVPN set up on the server and I am using openVPN connect for my client. I have some internal websites that I need to access and some of them don't work. I want to make sure that when the traffic is going through the VPN and not though the normal internet connection.
The gateway ip for my network is 192.168.0.1 and the gateway for openVPN is 10.8.0.1. I have done trace route and it shows that the websites that don't work access 192.168.0.1 and not 10.8.0.1. Is this proof that it is not going though the VPN?










share|improve this question






















  • It's not really an answer, so I will comment instead. Two things you need to check 1- What are your DNS ipconfig /all if you do not even have a DNS that can resolve your website internally, then you have a problem. 2- Check your routes route print is your Internal websites IP routed towards the Tunnel.

    – Alex
    Feb 18 '13 at 20:57











  • His question answers part of your comment already. DNS resolution is working fine because packets are being sent out.

    – gparent
    Feb 18 '13 at 20:58













4












4








4


2






I have a openVPN set up on the server and I am using openVPN connect for my client. I have some internal websites that I need to access and some of them don't work. I want to make sure that when the traffic is going through the VPN and not though the normal internet connection.
The gateway ip for my network is 192.168.0.1 and the gateway for openVPN is 10.8.0.1. I have done trace route and it shows that the websites that don't work access 192.168.0.1 and not 10.8.0.1. Is this proof that it is not going though the VPN?










share|improve this question














I have a openVPN set up on the server and I am using openVPN connect for my client. I have some internal websites that I need to access and some of them don't work. I want to make sure that when the traffic is going through the VPN and not though the normal internet connection.
The gateway ip for my network is 192.168.0.1 and the gateway for openVPN is 10.8.0.1. I have done trace route and it shows that the websites that don't work access 192.168.0.1 and not 10.8.0.1. Is this proof that it is not going though the VPN?







openvpn






share|improve this question













share|improve this question











share|improve this question




share|improve this question










asked Feb 18 '13 at 20:23









monkthemightymonkthemighty

702 gold badges2 silver badges9 bronze badges




702 gold badges2 silver badges9 bronze badges












  • It's not really an answer, so I will comment instead. Two things you need to check 1- What are your DNS ipconfig /all if you do not even have a DNS that can resolve your website internally, then you have a problem. 2- Check your routes route print is your Internal websites IP routed towards the Tunnel.

    – Alex
    Feb 18 '13 at 20:57











  • His question answers part of your comment already. DNS resolution is working fine because packets are being sent out.

    – gparent
    Feb 18 '13 at 20:58

















  • It's not really an answer, so I will comment instead. Two things you need to check 1- What are your DNS ipconfig /all if you do not even have a DNS that can resolve your website internally, then you have a problem. 2- Check your routes route print is your Internal websites IP routed towards the Tunnel.

    – Alex
    Feb 18 '13 at 20:57











  • His question answers part of your comment already. DNS resolution is working fine because packets are being sent out.

    – gparent
    Feb 18 '13 at 20:58
















It's not really an answer, so I will comment instead. Two things you need to check 1- What are your DNS ipconfig /all if you do not even have a DNS that can resolve your website internally, then you have a problem. 2- Check your routes route print is your Internal websites IP routed towards the Tunnel.

– Alex
Feb 18 '13 at 20:57





It's not really an answer, so I will comment instead. Two things you need to check 1- What are your DNS ipconfig /all if you do not even have a DNS that can resolve your website internally, then you have a problem. 2- Check your routes route print is your Internal websites IP routed towards the Tunnel.

– Alex
Feb 18 '13 at 20:57













His question answers part of your comment already. DNS resolution is working fine because packets are being sent out.

– gparent
Feb 18 '13 at 20:58





His question answers part of your comment already. DNS resolution is working fine because packets are being sent out.

– gparent
Feb 18 '13 at 20:58










4 Answers
4






active

oldest

votes


















7














If you're on windows then start a dos window and run the
tracert command.



e.g. tracert www.google.com



You can also use an IP address instead of a DNS name.



If you're on Linux you can do the same with the traceroute command.



With both utilities you should hopefully get a trace of the route that packets take to reach the destination. You'll be able to tell if it's passing through your VPN gateway.






share|improve this answer























  • I am using windows and when tracert google it uses the normal gateway. Also for the websites that don't work it uses the normal gateway. Is there anyway to force all traffic though the VPN?

    – monkthemighty
    Feb 18 '13 at 20:42











  • Yes, and if you want all traffic to go via the VPN you need to make all clients set their default route to whatever the VPN gateway address is. Normally you'd do this on a DHCP server to tell all clients on the LAN the new gateway (default route) address or you might be able to add it to the normal gateway to forward all traffic on via the VPN.

    – Matt
    Feb 18 '13 at 20:47












  • Yes, it's called Full Tunnel as opposed to Split Tunnel. But the first thing I would check is actually your routes with route print. Are you routing the correct traffic in the Tunnel?

    – Alex
    Feb 18 '13 at 20:49






  • 2





    You might want to start a new question. As it's been answered. We've now verified that not all your traffic is passing through the VPN.

    – Matt
    Feb 18 '13 at 20:53



















1














You can use a tool like Wireshark to "sniff" the traffic on your local network. Wireshark will allow you to see which traffic is going where based on the source and destination IP addresses.



Set up Wireshark on an interface that is between the hosts you want to test. Wireshark is a passive listener, so it won't interfere with your traffic.






share|improve this answer






























    0














    Look at the routing table....netstat -r. Yes you can change routing by modifications of the routing tables and/or using iptables.






    share|improve this answer






























      0














      On OS X, I use this, and it shows the interface as either en0 or utun0:



      ex:



      $ route -n get website.thatshouldroute.com





      share|improve this answer

























        Your Answer








        StackExchange.ready(function()
        var channelOptions =
        tags: "".split(" "),
        id: "2"
        ;
        initTagRenderer("".split(" "), "".split(" "), channelOptions);

        StackExchange.using("externalEditor", function()
        // Have to fire editor after snippets, if snippets enabled
        if (StackExchange.settings.snippets.snippetsEnabled)
        StackExchange.using("snippets", function()
        createEditor();
        );

        else
        createEditor();

        );

        function createEditor()
        StackExchange.prepareEditor(
        heartbeatType: 'answer',
        autoActivateHeartbeat: false,
        convertImagesToLinks: true,
        noModals: true,
        showLowRepImageUploadWarning: true,
        reputationToPostImages: 10,
        bindNavPrevention: true,
        postfix: "",
        imageUploader:
        brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
        contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
        allowUrls: true
        ,
        onDemand: true,
        discardSelector: ".discard-answer"
        ,immediatelyShowMarkdownHelp:true
        );



        );













        draft saved

        draft discarded


















        StackExchange.ready(
        function ()
        StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f480060%2fhow-do-i-tell-if-all-traffic-is-going-though-the-vpn%23new-answer', 'question_page');

        );

        Post as a guest















        Required, but never shown

























        4 Answers
        4






        active

        oldest

        votes








        4 Answers
        4






        active

        oldest

        votes









        active

        oldest

        votes






        active

        oldest

        votes









        7














        If you're on windows then start a dos window and run the
        tracert command.



        e.g. tracert www.google.com



        You can also use an IP address instead of a DNS name.



        If you're on Linux you can do the same with the traceroute command.



        With both utilities you should hopefully get a trace of the route that packets take to reach the destination. You'll be able to tell if it's passing through your VPN gateway.






        share|improve this answer























        • I am using windows and when tracert google it uses the normal gateway. Also for the websites that don't work it uses the normal gateway. Is there anyway to force all traffic though the VPN?

          – monkthemighty
          Feb 18 '13 at 20:42











        • Yes, and if you want all traffic to go via the VPN you need to make all clients set their default route to whatever the VPN gateway address is. Normally you'd do this on a DHCP server to tell all clients on the LAN the new gateway (default route) address or you might be able to add it to the normal gateway to forward all traffic on via the VPN.

          – Matt
          Feb 18 '13 at 20:47












        • Yes, it's called Full Tunnel as opposed to Split Tunnel. But the first thing I would check is actually your routes with route print. Are you routing the correct traffic in the Tunnel?

          – Alex
          Feb 18 '13 at 20:49






        • 2





          You might want to start a new question. As it's been answered. We've now verified that not all your traffic is passing through the VPN.

          – Matt
          Feb 18 '13 at 20:53
















        7














        If you're on windows then start a dos window and run the
        tracert command.



        e.g. tracert www.google.com



        You can also use an IP address instead of a DNS name.



        If you're on Linux you can do the same with the traceroute command.



        With both utilities you should hopefully get a trace of the route that packets take to reach the destination. You'll be able to tell if it's passing through your VPN gateway.






        share|improve this answer























        • I am using windows and when tracert google it uses the normal gateway. Also for the websites that don't work it uses the normal gateway. Is there anyway to force all traffic though the VPN?

          – monkthemighty
          Feb 18 '13 at 20:42











        • Yes, and if you want all traffic to go via the VPN you need to make all clients set their default route to whatever the VPN gateway address is. Normally you'd do this on a DHCP server to tell all clients on the LAN the new gateway (default route) address or you might be able to add it to the normal gateway to forward all traffic on via the VPN.

          – Matt
          Feb 18 '13 at 20:47












        • Yes, it's called Full Tunnel as opposed to Split Tunnel. But the first thing I would check is actually your routes with route print. Are you routing the correct traffic in the Tunnel?

          – Alex
          Feb 18 '13 at 20:49






        • 2





          You might want to start a new question. As it's been answered. We've now verified that not all your traffic is passing through the VPN.

          – Matt
          Feb 18 '13 at 20:53














        7












        7








        7







        If you're on windows then start a dos window and run the
        tracert command.



        e.g. tracert www.google.com



        You can also use an IP address instead of a DNS name.



        If you're on Linux you can do the same with the traceroute command.



        With both utilities you should hopefully get a trace of the route that packets take to reach the destination. You'll be able to tell if it's passing through your VPN gateway.






        share|improve this answer













        If you're on windows then start a dos window and run the
        tracert command.



        e.g. tracert www.google.com



        You can also use an IP address instead of a DNS name.



        If you're on Linux you can do the same with the traceroute command.



        With both utilities you should hopefully get a trace of the route that packets take to reach the destination. You'll be able to tell if it's passing through your VPN gateway.







        share|improve this answer












        share|improve this answer



        share|improve this answer










        answered Feb 18 '13 at 20:35









        MattMatt

        9,63413 gold badges65 silver badges124 bronze badges




        9,63413 gold badges65 silver badges124 bronze badges












        • I am using windows and when tracert google it uses the normal gateway. Also for the websites that don't work it uses the normal gateway. Is there anyway to force all traffic though the VPN?

          – monkthemighty
          Feb 18 '13 at 20:42











        • Yes, and if you want all traffic to go via the VPN you need to make all clients set their default route to whatever the VPN gateway address is. Normally you'd do this on a DHCP server to tell all clients on the LAN the new gateway (default route) address or you might be able to add it to the normal gateway to forward all traffic on via the VPN.

          – Matt
          Feb 18 '13 at 20:47












        • Yes, it's called Full Tunnel as opposed to Split Tunnel. But the first thing I would check is actually your routes with route print. Are you routing the correct traffic in the Tunnel?

          – Alex
          Feb 18 '13 at 20:49






        • 2





          You might want to start a new question. As it's been answered. We've now verified that not all your traffic is passing through the VPN.

          – Matt
          Feb 18 '13 at 20:53


















        • I am using windows and when tracert google it uses the normal gateway. Also for the websites that don't work it uses the normal gateway. Is there anyway to force all traffic though the VPN?

          – monkthemighty
          Feb 18 '13 at 20:42











        • Yes, and if you want all traffic to go via the VPN you need to make all clients set their default route to whatever the VPN gateway address is. Normally you'd do this on a DHCP server to tell all clients on the LAN the new gateway (default route) address or you might be able to add it to the normal gateway to forward all traffic on via the VPN.

          – Matt
          Feb 18 '13 at 20:47












        • Yes, it's called Full Tunnel as opposed to Split Tunnel. But the first thing I would check is actually your routes with route print. Are you routing the correct traffic in the Tunnel?

          – Alex
          Feb 18 '13 at 20:49






        • 2





          You might want to start a new question. As it's been answered. We've now verified that not all your traffic is passing through the VPN.

          – Matt
          Feb 18 '13 at 20:53

















        I am using windows and when tracert google it uses the normal gateway. Also for the websites that don't work it uses the normal gateway. Is there anyway to force all traffic though the VPN?

        – monkthemighty
        Feb 18 '13 at 20:42





        I am using windows and when tracert google it uses the normal gateway. Also for the websites that don't work it uses the normal gateway. Is there anyway to force all traffic though the VPN?

        – monkthemighty
        Feb 18 '13 at 20:42













        Yes, and if you want all traffic to go via the VPN you need to make all clients set their default route to whatever the VPN gateway address is. Normally you'd do this on a DHCP server to tell all clients on the LAN the new gateway (default route) address or you might be able to add it to the normal gateway to forward all traffic on via the VPN.

        – Matt
        Feb 18 '13 at 20:47






        Yes, and if you want all traffic to go via the VPN you need to make all clients set their default route to whatever the VPN gateway address is. Normally you'd do this on a DHCP server to tell all clients on the LAN the new gateway (default route) address or you might be able to add it to the normal gateway to forward all traffic on via the VPN.

        – Matt
        Feb 18 '13 at 20:47














        Yes, it's called Full Tunnel as opposed to Split Tunnel. But the first thing I would check is actually your routes with route print. Are you routing the correct traffic in the Tunnel?

        – Alex
        Feb 18 '13 at 20:49





        Yes, it's called Full Tunnel as opposed to Split Tunnel. But the first thing I would check is actually your routes with route print. Are you routing the correct traffic in the Tunnel?

        – Alex
        Feb 18 '13 at 20:49




        2




        2





        You might want to start a new question. As it's been answered. We've now verified that not all your traffic is passing through the VPN.

        – Matt
        Feb 18 '13 at 20:53






        You might want to start a new question. As it's been answered. We've now verified that not all your traffic is passing through the VPN.

        – Matt
        Feb 18 '13 at 20:53














        1














        You can use a tool like Wireshark to "sniff" the traffic on your local network. Wireshark will allow you to see which traffic is going where based on the source and destination IP addresses.



        Set up Wireshark on an interface that is between the hosts you want to test. Wireshark is a passive listener, so it won't interfere with your traffic.






        share|improve this answer



























          1














          You can use a tool like Wireshark to "sniff" the traffic on your local network. Wireshark will allow you to see which traffic is going where based on the source and destination IP addresses.



          Set up Wireshark on an interface that is between the hosts you want to test. Wireshark is a passive listener, so it won't interfere with your traffic.






          share|improve this answer

























            1












            1








            1







            You can use a tool like Wireshark to "sniff" the traffic on your local network. Wireshark will allow you to see which traffic is going where based on the source and destination IP addresses.



            Set up Wireshark on an interface that is between the hosts you want to test. Wireshark is a passive listener, so it won't interfere with your traffic.






            share|improve this answer













            You can use a tool like Wireshark to "sniff" the traffic on your local network. Wireshark will allow you to see which traffic is going where based on the source and destination IP addresses.



            Set up Wireshark on an interface that is between the hosts you want to test. Wireshark is a passive listener, so it won't interfere with your traffic.







            share|improve this answer












            share|improve this answer



            share|improve this answer










            answered Jun 6 at 15:46









            PatOnTheBackPatOnTheBack

            112 bronze badges




            112 bronze badges





















                0














                Look at the routing table....netstat -r. Yes you can change routing by modifications of the routing tables and/or using iptables.






                share|improve this answer



























                  0














                  Look at the routing table....netstat -r. Yes you can change routing by modifications of the routing tables and/or using iptables.






                  share|improve this answer

























                    0












                    0








                    0







                    Look at the routing table....netstat -r. Yes you can change routing by modifications of the routing tables and/or using iptables.






                    share|improve this answer













                    Look at the routing table....netstat -r. Yes you can change routing by modifications of the routing tables and/or using iptables.







                    share|improve this answer












                    share|improve this answer



                    share|improve this answer










                    answered Feb 18 '13 at 20:47









                    mdpcmdpc

                    10.3k8 gold badges47 silver badges60 bronze badges




                    10.3k8 gold badges47 silver badges60 bronze badges





















                        0














                        On OS X, I use this, and it shows the interface as either en0 or utun0:



                        ex:



                        $ route -n get website.thatshouldroute.com





                        share|improve this answer



























                          0














                          On OS X, I use this, and it shows the interface as either en0 or utun0:



                          ex:



                          $ route -n get website.thatshouldroute.com





                          share|improve this answer

























                            0












                            0








                            0







                            On OS X, I use this, and it shows the interface as either en0 or utun0:



                            ex:



                            $ route -n get website.thatshouldroute.com





                            share|improve this answer













                            On OS X, I use this, and it shows the interface as either en0 or utun0:



                            ex:



                            $ route -n get website.thatshouldroute.com






                            share|improve this answer












                            share|improve this answer



                            share|improve this answer










                            answered Jun 6 at 15:10









                            giantNinjagiantNinja

                            12 bronze badges




                            12 bronze badges



























                                draft saved

                                draft discarded
















































                                Thanks for contributing an answer to Server Fault!


                                • Please be sure to answer the question. Provide details and share your research!

                                But avoid


                                • Asking for help, clarification, or responding to other answers.

                                • Making statements based on opinion; back them up with references or personal experience.

                                To learn more, see our tips on writing great answers.




                                draft saved


                                draft discarded














                                StackExchange.ready(
                                function ()
                                StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f480060%2fhow-do-i-tell-if-all-traffic-is-going-though-the-vpn%23new-answer', 'question_page');

                                );

                                Post as a guest















                                Required, but never shown





















































                                Required, but never shown














                                Required, but never shown












                                Required, but never shown







                                Required, but never shown

































                                Required, but never shown














                                Required, but never shown












                                Required, but never shown







                                Required, but never shown







                                Popular posts from this blog

                                How to write a 12-bar blues melodyI-IV-V blues progressionHow to play the bridges in a standard blues progressionHow does Gdim7 fit in C# minor?question on a certain chord progressionMusicology of Melody12 bar blues, spread rhythm: alternative to 6th chord to avoid finger stretchChord progressions/ Root key/ MelodiesHow to put chords (POP-EDM) under a given lead vocal melody (starting from a good knowledge in music theory)Are there “rules” for improvising with the minor pentatonic scale over 12-bar shuffle?Confusion about blues scale and chords

                                What if the end-user didn't have the required library?What is setup.py?What is a clean, pythonic way to have multiple constructors in Python?What does Ruby have that Python doesn't, and vice versa?What is the reason for having '//' in Python?How do I create a namespace package in Python?How to package shared objects that python modules depend on?setuptools vs. distutils: why is distutils still a thing?Navigation in Windows 10 vs code not going to virtualenv library when the same library is installed at user levelPython create package for local usePackaging a project that uses multiple python versionsWhy is permission denied on pip install except for when “--user” is included at end of command?

                                Esgonzo ibérico Índice Descrición Distribución Hábitat Ameazas Notas Véxase tamén "Acerca dos nomes dos anfibios e réptiles galegos""Chalcides bedriagai"Chalcides bedriagai en Carrascal, L. M. Salvador, A. (Eds). Enciclopedia virtual de los vertebrados españoles. Museo Nacional de Ciencias Naturales, Madrid. España.Fotos