question

markphillips-4862 avatar image
0 Votes"
markphillips-4862 asked CandyLuo-MSFT commented

TCP/IP interface metric issue

There is a common issue at the company I work at has had recently. The issue begins when we move an associate to work using our new VPN solution and then the interface metric of that VPN's TAP adapter matches the interface metric of their wired ethernet connection and thus the computer ignores the VPN connection's access it should have when being VPN'ed into the company network.

We resolve this by forcing their TAP adapter to have interface metric of 1.

This has worked for everybody until recently, and I have one user that whenever he restarts his Surface Pro 4 that his interface metric reverts back to 25, which is also the automatic setting.

I have tried to make this setting change multiple ways, through Windows, through regedit, and through command prompt. No matter the method, still reverts on restart.

Then I thought maybe this was because of a group policy, but I have tried making this same change and restarting another user with same group policy as him and for that user the setting stuck just fine.

Also an FYI I have tried changing the interface metric for the actual ethernet connect to 35 and leave the TAP adapter at 25, but seems like that ALSO revert back to 25 on restart.

Thanks for looking into this.

Reply 0 people have the same question Edit | Subscribe

windows-10-network
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

CandyLuo-MSFT avatar image
0 Votes"
CandyLuo-MSFT answered CandyLuo-MSFT commented

Hi,

Did you use third-party VPN client or windows build-in VPN client? Based on your description, it seems something prevent modify.

Try to perform a clean boot and change interface metric, then restart the machine in clean boot see whether the issue still occurs. This can narrow whether the symptom is related with third-party service.

Best Regards,
Candy


If the Answer is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

· 6
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Yes, we use OpenVPN.

But I will try that clean boot method you mentioned and see if that helps.

0 Votes 0 ·

Alright Candy, so I did try this today with the user.

First, I should of thought of this, but since I'm working remote, this actually caused some issues with me being able to remote in with the software we use.

But after getting past that, it did not seem to help the issue, setting still reverted after restarting.

That said, we do have a few pieces of antivirus software that could NOT be stopped during the attempted clean boot and maybe they could be doing this?
We use Websense, Sophos, and HitmanPro.

0 Votes 0 ·

That said, we do have a few pieces of antivirus software that could NOT be stopped during the attempted clean boot and maybe they could be doing this? We use Websense, Sophos, and HitmanPro.

It might be. Try to disable those antivirus software temporally and then check if the issue still happens.

0 Votes 0 ·

Did you have any updates on this issue?

0 Votes 0 ·

Ah yeah, worked with them again today, this time while they were in office. Really strange because while on corporate network without VPN needed I was able to set the interface metric and restarting their PC at that time the setting stuck! Not sure if it's because they are in office .... Or maybe because I had uninstalled and installed the newest version of OpenVPN first.

Either way, seems good now.

0 Votes 0 ·
Show more comments