Ask Different is a question and answer site for power users of Apple hardware and software. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a IPSec/L2TP (PSK) VPN I'm connecting to with OSX's built in client through the System Preferences > Network (in Lion/10.7.2). The VPN gives me an IP of 10.0.1/24, but I need to access servers within the whole 10/8 and 172.16/16 range. By default the VPN will only route over 10.0.1/24, and if I want to access the other networks I need to select the "Send all traffic over VPN connection" checkbox. Is there an easy/sane way to specify the exact network ranges to route via the VPN so I don't have to send all my other traffic over it, and end up with problems like their firewall blocking google?

I imagine I could probably attack this with some command line route directives, but that seems really clunky. I also heard someone in passing suggest I try Tunnelblick, but I'm not explicitly connecting to an OpenVPN server, and the configuration file for Tunnelblick looked extremely OpenVPN specific.

Update: This question is covered with answers at

share|improve this question
But do those answers work on Lion? – algal Jul 3 '12 at 11:37
I have the solution working in 10.7.4. – Gabe Martin-Dempesy Jul 5 '12 at 20:56

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.