CISCO VPN Client

I set up a VPN server on a cisco router the other day, and am connecting to it with CISCO VPN Client

there is no split tunnelling or local LAN access configured.

But I notice on the stats when it is connected the discarded and bypassed count rise.

Now discarded I can understand as there may be chatter on my home network that it is dropping. But what are the bypassed packets? there not many of them a few per minute, but where are they from? I was wondering if it is the iskemp tunnel control packets?

Cheers

Find more posts tagged with

Save $250 on 2025 certification boot camps from Infosec!

Book now with code EOY2025

Button

Comments

QHalo

Packets bypassed—The total number of data packets that the VPN Client did not process because they did not need to be encrypted. Local ARPs and DHCP fall into this category.

VPN Client User Guide for Windows, Release 4.6 - Connecting to a Private Network [Cisco VPN Client] - Cisco Systems

This thread had a good recommendation, run a sniffer on it and check out the packets and see what they are. Same exact question you asked.

https://supportforums.cisco.com/thread/233638

HTH