Always On VPN client - how to add more static routes?

Question

_{Thursday, March 21, 2019 11:38 AM}

Hi - we are in the infancy stages of an AlwaysOn deployment, and I have ran the config .ps1 on a few machines with good results.  I now need to add another static route to that client config.

I can't seem to find any documentation as to how to 'update' a client that's already configured for machine tunnels, and that has one static route in the xml config.  I just need to add another route in the <route> section, and somehow apply that .ps1 *again* to clients that just need the new route to take hold.

Can anyone point me to the correct way to do this?  I know eventually - when we roll to the masses - I'll use SCCM to run config down for AO, but how can I manually do this for this handful of test clients I have now?  Thanks in advance for any suggestions.

All replies (5)

_{Thursday, March 21, 2019 9:00 PM ✅Answered}

Once a VPN profile is provisioned it's pretty much set in stone. ;) If you need to make changes after the fact, you'll need to delete the connection and re-create it. 

I'm sure you already have a handle on the routing configuration, but I'll share this link for reference in case others are unfamiliar with how to properly configure routes for Windows 10 Always On VPN connections. 

https://directaccess.richardhicks.com/2018/07/23/always-on-vpn-routing-configuration/

Richard M. Hicks
Microsoft Cloud & Datacenter MVP
Founder and Principal Consultant - Richard M. Hicks Consulting, Inc.
directaccess.richardicks.com

_{Thursday, March 21, 2019 9:02 PM}

Thanks Richard - marking as answer.

_{Friday, March 22, 2019 2:18 AM}

  A VPN is a point to point connection - what goes in one end comes out the other, so is not routable. Any routing has to be done after it reaches the VPN end point - it cannot be done at the VPN client end.

Bill

_{Friday, March 22, 2019 10:44 AM}

Thanks for your reply.  I'm very familiar with routing and tunneling.

Just needed to ask the question regarding adding additional static routes on an Always On client for split-tunneling.

_{Wednesday, March 25, 2020 8:14 PM}

Richard Hicks,

You're website for Always-On VPN has been amazing while we're reacting to work from home as a result of Covid-19!

Thank you sir!