Prevent users from accessing local subnet while VPN'ed in?

Using the PPTP and/or L2TP connection built into XP, is it possible to
restrict users, while VPN'ed in, from accessing the local subnet their
machine is physically on?

Nortel/Cisco clients offer this feature, once VPN'ed in to the corporate
network you cannot ping another machine on the same subnet as yours.

Thanks,
Trevor

you may have two options. 1. setup IPSec. 2. setup peer to peer routing.

Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
"Trevor" <(E-Mail Removed)> wrote in message news:(E-Mail Removed)...
Using the PPTP and/or L2TP connection built into XP, is it possible to
restrict users, while VPN'ed in, from accessing the local subnet their
machine is physically on?

Nortel/Cisco clients offer this feature, once VPN'ed in to the corporate
network you cannot ping another machine on the same subnet as yours.

Thanks,
Trevor

IPSec via Group Policies? How would one go about blocking the client from accessing the local network while VPN'ed in? This policy would need to be effective enough to allow them to access the local subnet while on the company network, of course.

Not sure what you mean by peer to peer routing.

I appreciate your response, this seems like a difficult subject without using a 3rd party client.

Thanks!

Trevor

"Robert L [MS-MVP]" <(E-Mail Removed)> wrote in message news:(E-Mail Removed)...
you may have two options. 1. setup IPSec. 2. setup peer to peer routing.

Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
"Trevor" <(E-Mail Removed)> wrote in message news:(E-Mail Removed)...
Using the PPTP and/or L2TP connection built into XP, is it possible to
restrict users, while VPN'ed in, from accessing the local subnet their
machine is physically on?

Nortel/Cisco clients offer this feature, once VPN'ed in to the corporate
network you cannot ping another machine on the same subnet as yours.

Thanks,
Trevor