AoVPN - updating routes

[MatthewL]

We are in the process of moving from DirectAccess to AoVPN but we seem to be going backwards. AoVPN is all up and running using split tunnelling and no issues there exepct when it comes to adding a new route.

 

It seems we have to update the XML file, delete the connection, re add it and reconnect for it to work, just don't seem to be able to update the XML let it reconnect and away we go.

 

We often have to add various routes in for sites that nee to come back via the DC, we want to use split tunnelling but is there a way around it, what do you lot do?

[free780]

We are in the process of moving from DirectAccess to AoVPN but we seem to be going backwards. AoVPN is all up and running using split tunnelling and no issues there exepct when it comes to adding a new route.

 

It seems we have to update the XML file, delete the connection, re add it and reconnect for it to work, just don't seem to be able to update the XML let it reconnect and away we go.

 

We often have to add various routes in for sites that nee to come back via the DC, we want to use split tunnelling but is there a way around it, what do you lot do?

 

If you have intune/SCCM setup you can have the VPN config pushed out. Or you provide a very large route in the xml.

 

10.0.0.0/8 or similar

 

There are some 3rd party GPOs you can buy to do the same thing.

 

https://directaccess.richardhicks.com/2022/03/07/always-on-vpn-with-active-directory-group-policy/

 

 

.

[MatthewL]

We use another product but seems like we have to recreate the VPN for it to kick in.

 

We already do route large ranges like that but we have lots of random sites that need adding in which is the headache.

 

Will look at that article link and go from there.