Win7 - How to disable VPN route to internet?

redtopia

I'm running Access Server and recently made some client config changes to push a higher metric for my VPN route in order to allow my local area network to have a lower metric and work as my primary route to the internet. This works great when I'm at one of my offices, but for some reason, at another office, I'm running into an intermittent problem that looks like my machine is using the VPN as a gateway to the internet. This route fails and I get no internet connection. Is there a way to completely disable the VPN route as an internet gateway while leaving it as the gateway to my VPN subnet.

Currently, my routes look like this - I want to eliminate the second route, which is the gateway for the VPN, which does not provide internet access:

Active Routes:
Network Destination          Netmask            Gateway        Interface       Metric
            0.0.0.0          0.0.0.0        192.168.2.1    192.168.2.237          276
            0.0.0.0          0.0.0.0       172.27.232.1    172.27.232.18         1020
           10.1.0.0      255.255.0.0       172.27.232.1    172.27.232.18         1020

redtopia

UPDATE: In the Access Server admin settings, the following config settings are:

VPN Mode: Layer 3 (routing/NAT)

Should client Internet traffic be routed through the VPN? [NO]

Should clients be allowed to access network services on the VPN gateway IP address? [YES]

Do not alter clients' DNS server settings [CHECKED]

redtopia

Any ideas? I set my wireless adapter metric to 10, which intermittently helps. But my gateway to the internet is not consistent, and I constantly lose my internet access.

ap1

Hey, I had the same exact issue with the same server configuration with this. The following topic helped:
https://forums.openvpn.net/viewtopic.php?f=24&t=22414&p=64267&hilit=still+pushes+gateway#p64267

Gist of it, add the following directive to your server:
Admin UI > Advanced VPN > server config directives
push "route-metric 1000"

redtopia

Thanks... I am already doing that. What I"m hoping is possible is to remove the 0.0.0.0 route for the VPN connection altogether, which would prevent the client from ever using the VPN as an internet gateway. The route to the vpn subnet would still be there.