Examkin

Question

Difficulty: Very hardWindows Client Networking Configuration

A remote user on a Windows 11 Enterprise client connects to the corporate network using a built-in Windows VPN connection. While the VPN connection is active, the user can successfully access corporate intranet resources, but completely loses access to local subnet devices, including a local network printer on the user's home LAN. When the VPN connection is disconnected, local printing resumes immediately. Which of the following advanced IPv4 configuration settings on the client workstation should the technician modify to enable simultaneous access to local subnet resources while connected to the VPN?

  1. Uncheck the "Use default gateway on remote network" setting within the Advanced TCP/IP Settings of the VPN connection IPv4 properties.Answer
  2. B
    Set the Interface Metric of the local physical network adapter to 1 and the VPN adapter metric to 9999 in Advanced TCP/IP Settings.
  3. C
    Execute the command netsh interface ipv4 set address name="Ethernet" dhcp static in an elevated Command Prompt.
  4. D
    Downgrade the OS to Windows 11 Home because Windows 11 Enterprise automatically enforces mandatory full-tunnel routing policy locks.

Answer

Unchecking the "Use default gateway on remote network" option in the Advanced TCP/IP Properties of the VPN connection enables split tunneling, allowing local traffic to use the local network interface while corporate traffic routes through the VPN connection.
Unchecking the 'Use default gateway on remote network' option in the Advanced TCP/IP Settings of the VPN connection properties configures split tunneling on the Windows client. This setting prevents Windows from directing all outbound network traffic through the remote VPN gateway, allowing traffic destined for the local network subnet (such as local printers) to continue using the local physical network adapter and default gateway.

Step-by-Step Solution

1
Identify the cause of routing failure
By default, Windows client VPN connections enable full tunneling by assigning the default gateway to the remote network interface.
When full tunneling is enabled, all IP traffic—including traffic destined for the local 192.168.x.x home subnet—is sent across the VPN tunnel, causing local connection drops.
2
Navigate to the VPN connection properties
Access Network Connections (ncpa.cpl), right-click the VPN adapter, open Properties, select IPv4, and click Advanced.
Advanced TCP/IP settings control default gateway selection and metric assignments specific to individual virtual adapters.
3
Modify the default gateway assignment for the VPN interface
Clear the check box for "Use default gateway on remote network".
Disabling this option retains the local gateway for local subnet destinations while keeping static routes active for the corporate VPN network.

Key Concept

Windows Client VPN Split Tunneling via Advanced TCP/IP Default Gateway Settings
Rate this question

Topics

Windows Client Networking Configuration

More questions from this topic