Local Lan Access while on VPN

cancersticks

Limp Gawd
Joined
Nov 15, 2001
Messages
309
Is there any way to print to local network printers while connected to a VPN? There are no options to access local LAN on the VPN software (iPass only...nothing else on the client side)
 
This option depends upon the provider of the VPN and their security policies. Usually vpn's are setup that way to protect the enterprise from being attacked through the vpn client. (split tunneling).

Unfortunately, to advise one a way around a security procedure, is against forum rules. Plus most vpn software can detect changes and will drop their connections upon detection.

I would recommend contacting your company's IT group and asking if they allow the feature that you request. It is doable, without exposing the enterprise to greater risk, but that would have to be decided by your company's IT group.

HTH.
 
I think I should be a bit more detailed lest anyone thinks I'm trying to violate any policies.

I set up an temporary office, that has users connected to a local LAN, with networked printers. Some of them are using a VPN to connect to an Exchange server, but aren't able to print to the local printers without first disconnecting their VPN connection. A co-worker of mine was thinking using IPX to print (while on their VPN), but I'm really uncomfortable with the idea of doing anything more than adding a printer or changing a printer port (I know the company that the office is for allow their reps to do this without issue)...

So, after thinking about this for a bit, I would like to revise my question. Would it be possible for the people to print if I set up a seperate machine (using it as a makeshift print server) and DMZ'd it (with a public IP address)?
 
well... the two offices are on different network segments / subnets right?

so when you VPN into the remote office you are in fact part of it which would make any local resources unavailable to you. (I Know it shouldn't but it happens often).

I'm guessing you are printing to regular AD printer shares? (and not by IP)

you could try adding the DNS servers to their VPN connections, first the remote DNS and then for secondary DNS the local one.
 
It sounds like you are having each individual machine create a VPN tunnel. What might work better would be to setup a site-to-site VPN. The PC's and local resources will still be able to find each other and when a request for something at the remote site (by subnet) the VPN will carry the traffic. This is usually done with a hardware VPN device inbetween the PC's and the internet.
 
Back
Top