How do i tell if all traffic is going though the vpn?OpenVPN working - but how to route all traffic down it?How to force all traffic through VPN?OpenVPN running on Internet Gateway, so all private clients can access VPN with no configHow do I route all traffic from clients connected to the DD-WRT to its OpenVPN tunnel tun0?How to config private IPs for IPMI using VPN?Routing all traffc though OpenVPN on WindowsOpenVPN on Windows 10 without redirect-gateway option, or with options just to handle VPN traffichow to force all internet traffic go through my vpn tunnelOpenVPN Access Server - How Do You Route All Client Traffic Through The VPN?Rredirect Internet traffic to VPN Server (all traffic)
How dangerous are set-size assumptions?
Why aren't cotton tents more popular?
Can ADFS connect to other SSO services?
Can any NP-Complete Problem be solved using at most polynomial space (but while using exponential time?)
How is hair tissue mineral analysis performed?
Unusual mail headers, evidence of an attempted attack. Have I been pwned?
Can we put equal sign after aggregate functions in sql?
First-year PhD giving a talk among well-established researchers in the field
Tantum religio potuit suadere malorum – Lucretius
Loss of power when I remove item from the outlet
Hot coffee brewing solutions for deep woods camping
Sci fi short story, robot city that nags people about health
Where can I find Intensity vs Observed wavelength graphs?
As a fresh graduate, should I get my first credit card?
Do I have any obligations to my PhD supervisor's requests after I have graduated?
Should developer taking test phones home or put in office?
C-152 carb heat on before landing in hot weather?
Swapping rooks in a 4x4 board
What are the penalties for overstaying in USA?
Can Ogre clerics use Purify Food and Drink on humanoid characters?
I am completely new to Tales from the Floating Vagabond, how do I get started?
Interaction between Leyline of Anticipation and Teferi, Time Raveler
Reused Nested Decision Logic - CTE vs Copying Code
Why doesn't a marching band have strings?
How do i tell if all traffic is going though the vpn?
OpenVPN working - but how to route all traffic down it?How to force all traffic through VPN?OpenVPN running on Internet Gateway, so all private clients can access VPN with no configHow do I route all traffic from clients connected to the DD-WRT to its OpenVPN tunnel tun0?How to config private IPs for IPMI using VPN?Routing all traffc though OpenVPN on WindowsOpenVPN on Windows 10 without redirect-gateway option, or with options just to handle VPN traffichow to force all internet traffic go through my vpn tunnelOpenVPN Access Server - How Do You Route All Client Traffic Through The VPN?Rredirect Internet traffic to VPN Server (all traffic)
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty margin-bottom:0;
I have a openVPN set up on the server and I am using openVPN connect for my client. I have some internal websites that I need to access and some of them don't work. I want to make sure that when the traffic is going through the VPN and not though the normal internet connection.
The gateway ip for my network is 192.168.0.1 and the gateway for openVPN is 10.8.0.1. I have done trace route and it shows that the websites that don't work access 192.168.0.1 and not 10.8.0.1. Is this proof that it is not going though the VPN?
openvpn
add a comment |
I have a openVPN set up on the server and I am using openVPN connect for my client. I have some internal websites that I need to access and some of them don't work. I want to make sure that when the traffic is going through the VPN and not though the normal internet connection.
The gateway ip for my network is 192.168.0.1 and the gateway for openVPN is 10.8.0.1. I have done trace route and it shows that the websites that don't work access 192.168.0.1 and not 10.8.0.1. Is this proof that it is not going though the VPN?
openvpn
It's not really an answer, so I will comment instead. Two things you need to check 1- What are your DNS ipconfig /all if you do not even have a DNS that can resolve your website internally, then you have a problem. 2- Check your routes route print is your Internal websites IP routed towards the Tunnel.
– Alex
Feb 18 '13 at 20:57
His question answers part of your comment already. DNS resolution is working fine because packets are being sent out.
– gparent
Feb 18 '13 at 20:58
add a comment |
I have a openVPN set up on the server and I am using openVPN connect for my client. I have some internal websites that I need to access and some of them don't work. I want to make sure that when the traffic is going through the VPN and not though the normal internet connection.
The gateway ip for my network is 192.168.0.1 and the gateway for openVPN is 10.8.0.1. I have done trace route and it shows that the websites that don't work access 192.168.0.1 and not 10.8.0.1. Is this proof that it is not going though the VPN?
openvpn
I have a openVPN set up on the server and I am using openVPN connect for my client. I have some internal websites that I need to access and some of them don't work. I want to make sure that when the traffic is going through the VPN and not though the normal internet connection.
The gateway ip for my network is 192.168.0.1 and the gateway for openVPN is 10.8.0.1. I have done trace route and it shows that the websites that don't work access 192.168.0.1 and not 10.8.0.1. Is this proof that it is not going though the VPN?
openvpn
openvpn
asked Feb 18 '13 at 20:23
monkthemightymonkthemighty
702 gold badges2 silver badges9 bronze badges
702 gold badges2 silver badges9 bronze badges
It's not really an answer, so I will comment instead. Two things you need to check 1- What are your DNS ipconfig /all if you do not even have a DNS that can resolve your website internally, then you have a problem. 2- Check your routes route print is your Internal websites IP routed towards the Tunnel.
– Alex
Feb 18 '13 at 20:57
His question answers part of your comment already. DNS resolution is working fine because packets are being sent out.
– gparent
Feb 18 '13 at 20:58
add a comment |
It's not really an answer, so I will comment instead. Two things you need to check 1- What are your DNS ipconfig /all if you do not even have a DNS that can resolve your website internally, then you have a problem. 2- Check your routes route print is your Internal websites IP routed towards the Tunnel.
– Alex
Feb 18 '13 at 20:57
His question answers part of your comment already. DNS resolution is working fine because packets are being sent out.
– gparent
Feb 18 '13 at 20:58
It's not really an answer, so I will comment instead. Two things you need to check 1- What are your DNS ipconfig /all if you do not even have a DNS that can resolve your website internally, then you have a problem. 2- Check your routes route print is your Internal websites IP routed towards the Tunnel.
– Alex
Feb 18 '13 at 20:57
It's not really an answer, so I will comment instead. Two things you need to check 1- What are your DNS ipconfig /all if you do not even have a DNS that can resolve your website internally, then you have a problem. 2- Check your routes route print is your Internal websites IP routed towards the Tunnel.
– Alex
Feb 18 '13 at 20:57
His question answers part of your comment already. DNS resolution is working fine because packets are being sent out.
– gparent
Feb 18 '13 at 20:58
His question answers part of your comment already. DNS resolution is working fine because packets are being sent out.
– gparent
Feb 18 '13 at 20:58
add a comment |
4 Answers
4
active
oldest
votes
If you're on windows then start a dos window and run the
tracert command.
e.g. tracert www.google.com
You can also use an IP address instead of a DNS name.
If you're on Linux you can do the same with the traceroute command.
With both utilities you should hopefully get a trace of the route that packets take to reach the destination. You'll be able to tell if it's passing through your VPN gateway.
I am using windows and when tracert google it uses the normal gateway. Also for the websites that don't work it uses the normal gateway. Is there anyway to force all traffic though the VPN?
– monkthemighty
Feb 18 '13 at 20:42
Yes, and if you want all traffic to go via the VPN you need to make all clients set their default route to whatever the VPN gateway address is. Normally you'd do this on a DHCP server to tell all clients on the LAN the new gateway (default route) address or you might be able to add it to the normal gateway to forward all traffic on via the VPN.
– Matt
Feb 18 '13 at 20:47
Yes, it's called Full Tunnel as opposed to Split Tunnel. But the first thing I would check is actually your routes with route print. Are you routing the correct traffic in the Tunnel?
– Alex
Feb 18 '13 at 20:49
2
You might want to start a new question. As it's been answered. We've now verified that not all your traffic is passing through the VPN.
– Matt
Feb 18 '13 at 20:53
add a comment |
You can use a tool like Wireshark to "sniff" the traffic on your local network. Wireshark will allow you to see which traffic is going where based on the source and destination IP addresses.
Set up Wireshark on an interface that is between the hosts you want to test. Wireshark is a passive listener, so it won't interfere with your traffic.
add a comment |
Look at the routing table....netstat -r. Yes you can change routing by modifications of the routing tables and/or using iptables.
add a comment |
On OS X, I use this, and it shows the interface as either en0 or utun0:
ex:
$ route -n get website.thatshouldroute.com
add a comment |
Your Answer
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "2"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f480060%2fhow-do-i-tell-if-all-traffic-is-going-though-the-vpn%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
4 Answers
4
active
oldest
votes
4 Answers
4
active
oldest
votes
active
oldest
votes
active
oldest
votes
If you're on windows then start a dos window and run the
tracert command.
e.g. tracert www.google.com
You can also use an IP address instead of a DNS name.
If you're on Linux you can do the same with the traceroute command.
With both utilities you should hopefully get a trace of the route that packets take to reach the destination. You'll be able to tell if it's passing through your VPN gateway.
I am using windows and when tracert google it uses the normal gateway. Also for the websites that don't work it uses the normal gateway. Is there anyway to force all traffic though the VPN?
– monkthemighty
Feb 18 '13 at 20:42
Yes, and if you want all traffic to go via the VPN you need to make all clients set their default route to whatever the VPN gateway address is. Normally you'd do this on a DHCP server to tell all clients on the LAN the new gateway (default route) address or you might be able to add it to the normal gateway to forward all traffic on via the VPN.
– Matt
Feb 18 '13 at 20:47
Yes, it's called Full Tunnel as opposed to Split Tunnel. But the first thing I would check is actually your routes with route print. Are you routing the correct traffic in the Tunnel?
– Alex
Feb 18 '13 at 20:49
2
You might want to start a new question. As it's been answered. We've now verified that not all your traffic is passing through the VPN.
– Matt
Feb 18 '13 at 20:53
add a comment |
If you're on windows then start a dos window and run the
tracert command.
e.g. tracert www.google.com
You can also use an IP address instead of a DNS name.
If you're on Linux you can do the same with the traceroute command.
With both utilities you should hopefully get a trace of the route that packets take to reach the destination. You'll be able to tell if it's passing through your VPN gateway.
I am using windows and when tracert google it uses the normal gateway. Also for the websites that don't work it uses the normal gateway. Is there anyway to force all traffic though the VPN?
– monkthemighty
Feb 18 '13 at 20:42
Yes, and if you want all traffic to go via the VPN you need to make all clients set their default route to whatever the VPN gateway address is. Normally you'd do this on a DHCP server to tell all clients on the LAN the new gateway (default route) address or you might be able to add it to the normal gateway to forward all traffic on via the VPN.
– Matt
Feb 18 '13 at 20:47
Yes, it's called Full Tunnel as opposed to Split Tunnel. But the first thing I would check is actually your routes with route print. Are you routing the correct traffic in the Tunnel?
– Alex
Feb 18 '13 at 20:49
2
You might want to start a new question. As it's been answered. We've now verified that not all your traffic is passing through the VPN.
– Matt
Feb 18 '13 at 20:53
add a comment |
If you're on windows then start a dos window and run the
tracert command.
e.g. tracert www.google.com
You can also use an IP address instead of a DNS name.
If you're on Linux you can do the same with the traceroute command.
With both utilities you should hopefully get a trace of the route that packets take to reach the destination. You'll be able to tell if it's passing through your VPN gateway.
If you're on windows then start a dos window and run the
tracert command.
e.g. tracert www.google.com
You can also use an IP address instead of a DNS name.
If you're on Linux you can do the same with the traceroute command.
With both utilities you should hopefully get a trace of the route that packets take to reach the destination. You'll be able to tell if it's passing through your VPN gateway.
answered Feb 18 '13 at 20:35
MattMatt
9,63413 gold badges65 silver badges124 bronze badges
9,63413 gold badges65 silver badges124 bronze badges
I am using windows and when tracert google it uses the normal gateway. Also for the websites that don't work it uses the normal gateway. Is there anyway to force all traffic though the VPN?
– monkthemighty
Feb 18 '13 at 20:42
Yes, and if you want all traffic to go via the VPN you need to make all clients set their default route to whatever the VPN gateway address is. Normally you'd do this on a DHCP server to tell all clients on the LAN the new gateway (default route) address or you might be able to add it to the normal gateway to forward all traffic on via the VPN.
– Matt
Feb 18 '13 at 20:47
Yes, it's called Full Tunnel as opposed to Split Tunnel. But the first thing I would check is actually your routes with route print. Are you routing the correct traffic in the Tunnel?
– Alex
Feb 18 '13 at 20:49
2
You might want to start a new question. As it's been answered. We've now verified that not all your traffic is passing through the VPN.
– Matt
Feb 18 '13 at 20:53
add a comment |
I am using windows and when tracert google it uses the normal gateway. Also for the websites that don't work it uses the normal gateway. Is there anyway to force all traffic though the VPN?
– monkthemighty
Feb 18 '13 at 20:42
Yes, and if you want all traffic to go via the VPN you need to make all clients set their default route to whatever the VPN gateway address is. Normally you'd do this on a DHCP server to tell all clients on the LAN the new gateway (default route) address or you might be able to add it to the normal gateway to forward all traffic on via the VPN.
– Matt
Feb 18 '13 at 20:47
Yes, it's called Full Tunnel as opposed to Split Tunnel. But the first thing I would check is actually your routes with route print. Are you routing the correct traffic in the Tunnel?
– Alex
Feb 18 '13 at 20:49
2
You might want to start a new question. As it's been answered. We've now verified that not all your traffic is passing through the VPN.
– Matt
Feb 18 '13 at 20:53
I am using windows and when tracert google it uses the normal gateway. Also for the websites that don't work it uses the normal gateway. Is there anyway to force all traffic though the VPN?
– monkthemighty
Feb 18 '13 at 20:42
I am using windows and when tracert google it uses the normal gateway. Also for the websites that don't work it uses the normal gateway. Is there anyway to force all traffic though the VPN?
– monkthemighty
Feb 18 '13 at 20:42
Yes, and if you want all traffic to go via the VPN you need to make all clients set their default route to whatever the VPN gateway address is. Normally you'd do this on a DHCP server to tell all clients on the LAN the new gateway (default route) address or you might be able to add it to the normal gateway to forward all traffic on via the VPN.
– Matt
Feb 18 '13 at 20:47
Yes, and if you want all traffic to go via the VPN you need to make all clients set their default route to whatever the VPN gateway address is. Normally you'd do this on a DHCP server to tell all clients on the LAN the new gateway (default route) address or you might be able to add it to the normal gateway to forward all traffic on via the VPN.
– Matt
Feb 18 '13 at 20:47
Yes, it's called Full Tunnel as opposed to Split Tunnel. But the first thing I would check is actually your routes with route print. Are you routing the correct traffic in the Tunnel?
– Alex
Feb 18 '13 at 20:49
Yes, it's called Full Tunnel as opposed to Split Tunnel. But the first thing I would check is actually your routes with route print. Are you routing the correct traffic in the Tunnel?
– Alex
Feb 18 '13 at 20:49
2
2
You might want to start a new question. As it's been answered. We've now verified that not all your traffic is passing through the VPN.
– Matt
Feb 18 '13 at 20:53
You might want to start a new question. As it's been answered. We've now verified that not all your traffic is passing through the VPN.
– Matt
Feb 18 '13 at 20:53
add a comment |
You can use a tool like Wireshark to "sniff" the traffic on your local network. Wireshark will allow you to see which traffic is going where based on the source and destination IP addresses.
Set up Wireshark on an interface that is between the hosts you want to test. Wireshark is a passive listener, so it won't interfere with your traffic.
add a comment |
You can use a tool like Wireshark to "sniff" the traffic on your local network. Wireshark will allow you to see which traffic is going where based on the source and destination IP addresses.
Set up Wireshark on an interface that is between the hosts you want to test. Wireshark is a passive listener, so it won't interfere with your traffic.
add a comment |
You can use a tool like Wireshark to "sniff" the traffic on your local network. Wireshark will allow you to see which traffic is going where based on the source and destination IP addresses.
Set up Wireshark on an interface that is between the hosts you want to test. Wireshark is a passive listener, so it won't interfere with your traffic.
You can use a tool like Wireshark to "sniff" the traffic on your local network. Wireshark will allow you to see which traffic is going where based on the source and destination IP addresses.
Set up Wireshark on an interface that is between the hosts you want to test. Wireshark is a passive listener, so it won't interfere with your traffic.
answered Jun 6 at 15:46
PatOnTheBackPatOnTheBack
112 bronze badges
112 bronze badges
add a comment |
add a comment |
Look at the routing table....netstat -r. Yes you can change routing by modifications of the routing tables and/or using iptables.
add a comment |
Look at the routing table....netstat -r. Yes you can change routing by modifications of the routing tables and/or using iptables.
add a comment |
Look at the routing table....netstat -r. Yes you can change routing by modifications of the routing tables and/or using iptables.
Look at the routing table....netstat -r. Yes you can change routing by modifications of the routing tables and/or using iptables.
answered Feb 18 '13 at 20:47
mdpcmdpc
10.3k8 gold badges47 silver badges60 bronze badges
10.3k8 gold badges47 silver badges60 bronze badges
add a comment |
add a comment |
On OS X, I use this, and it shows the interface as either en0 or utun0:
ex:
$ route -n get website.thatshouldroute.com
add a comment |
On OS X, I use this, and it shows the interface as either en0 or utun0:
ex:
$ route -n get website.thatshouldroute.com
add a comment |
On OS X, I use this, and it shows the interface as either en0 or utun0:
ex:
$ route -n get website.thatshouldroute.com
On OS X, I use this, and it shows the interface as either en0 or utun0:
ex:
$ route -n get website.thatshouldroute.com
answered Jun 6 at 15:10
giantNinjagiantNinja
12 bronze badges
12 bronze badges
add a comment |
add a comment |
Thanks for contributing an answer to Server Fault!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f480060%2fhow-do-i-tell-if-all-traffic-is-going-though-the-vpn%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
It's not really an answer, so I will comment instead. Two things you need to check 1- What are your DNS ipconfig /all if you do not even have a DNS that can resolve your website internally, then you have a problem. 2- Check your routes route print is your Internal websites IP routed towards the Tunnel.
– Alex
Feb 18 '13 at 20:57
His question answers part of your comment already. DNS resolution is working fine because packets are being sent out.
– gparent
Feb 18 '13 at 20:58