Skip to content

Commit 8ad0ca8

Browse files
authored
Update azure-vpn-client-optional-configurations.md
force tunnelling for Windows and macOS clients
1 parent 443d9cc commit 8ad0ca8

File tree

1 file changed

+27
-1
lines changed

1 file changed

+27
-1
lines changed

articles/vpn-gateway/azure-vpn-client-optional-configurations.md

Lines changed: 27 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -94,7 +94,17 @@ Split tunneling is configured by default for the VPN client.
9494

9595
### Forced tunneling
9696

97-
You can configure forced tunneling in order to direct all traffic to the VPN tunnel. Forced tunneling can be configured using two different methods; either by advertising custom routes, or by modifying the profile XML file. You can include 0/0 if you're using the Azure VPN Client version 2.1900:39.0 or higher.
97+
You can configure forced tunneling in order to direct all traffic to the VPN tunnel. Forced tunneling can be configured using two different methods; either by advertising custom routes, or by modifying the profile XML file.
98+
99+
100+
For Azure VPN Client for Windows:
101+
- version 2.1900:39.0 or higher. You can include the route 0/0. Modify the downloaded profile xml file and add the **\<includeroutes>\<route>\<destination>\<mask> \</destination>\</mask>\</route>\</includeroutes>** tags. Make sure to update the version number to 2.
102+
- Version lower than 2.1900:39.0: You need to add two custom routes: 0.0.0.0/1 and 128.0.0.0/1.
103+
104+
105+
For Azure VPN Client on macOS:
106+
- macOS version 14 or higher. Only the custom route 0/0 is supported. The routes 0.0.0.0/1 and 128.0.0.0/1 are not supported.
107+
98108

99109
> [!NOTE]
100110
> Internet connectivity is not provided through the VPN gateway. As a result, all traffic bound for the Internet is dropped.
@@ -104,6 +114,22 @@ You can configure forced tunneling in order to direct all traffic to the VPN tun
104114

105115
* **Profile XML:** You can modify the downloaded profile xml file and add the **\<includeroutes>\<route>\<destination>\<mask> \</destination>\</mask>\</route>\</includeroutes>** tags.
106116

117+
You can include the custom route `0.0.0.0/0` in the xml file:
118+
```xml
119+
<azvpnprofile>
120+
<clientconfig>
121+
122+
<includeroutes>
123+
<route>
124+
<destination>0.0.0.0</destination><mask>0</mask>
125+
</route>
126+
</includeroutes>
127+
128+
</clientconfig>
129+
</azvpnprofile>
130+
```
131+
132+
You can add the custom routes `0.0.0.0/1` and `128.0.0.0/1` in the xml file:
107133
```xml
108134
<azvpnprofile>
109135
<clientconfig>

0 commit comments

Comments
 (0)