Mac – exclude ip from vpn

macmac-osxnetworkingroutingvpn

I have a mac running a parallels virtual machine with ubunutu server and a webserver installed. I can ssh to it and navigate to the web server in the virtual machine from the mac. Once I connect to my VPN at work I can't reach the virtual machine any more. Tracerouteing to the virtual machine show it trying to go over the VPN instead of locally.

I've tried switching the virtual machine to use a NAT instead of bridging but I'm still unable to reach the web server. I've also tried to update the routing table but my networking skills are severely lacking.

How can I exclude the virtual machine's ip from the VPN so I can develop when I'm on the VPN?

Here's a snippet from netstat. 10.211.55.6 is the virtual machine in bridged mode.

Routing tables

Internet:
Destination        Gateway            Flags        Refs      Use   Netif Expire
default            utun0              UCS            25        0   utun0
default            10.30.10.254       UGScI           1        0     en0
default            10.30.210.254      UGScI           1        0     en1
...
10.211.55/24       utun0              UCS             2        0   utun0
10.211.55.6        utun0              UHW3I           0       15   utun0   3410
10.211.55.255      utun0              UHW3I           0       37   utun0   3592

Best Answer

What you are seeking is known as "split tunneling" which is actually frown upon from a security point of view. The following appears to be a utility which allows "split tunneling" over SSH - http://www.ubuntugeek.com/sshsplit-a-utility-to-multiplex-ssh-dynamic-tunnels.html.

Ultimately, you probably want to contact your company's IT folks, if your want to "split tunnel" while running through their VPN.

Related Topic