bypass local addresses and auto detect TS gateway

[Tom Decaluwé]

Hi,

On the MSTSC client TS gateway tab you now have the option "bypass TS
gateway server for local addresses"

My question is, what does the client concider to be local? when does it
decide yes i need to use the TS gateway or no i don't i can directly connect?

1) does it look at the local NIC subnet
2) does it look at AD sites and services
3) does it do some sort of connection test
4)....

what determins the local yes or no answer?

As a second question i see you can select auto detection for TS gateway, but
how does this work?

1) does it broadcast for a TS gateway
2) does it query AD for TS gateway servers
3) does it look at specific DNS records
4)...

Any info is much apreaciated,

Tom Decaluwé
www.it-talks.be

 

[Vera Noest [MVP]]

Re: bypass local addresses and auto detect TS gateway

comments inline

=?Utf-8?B?VG9tIERlY2FsdXfDqQ==?=
<TomDecaluw@discussions.microsoft.com> wrote on 29 sep 2008 in
microsoft.public.windows.terminal_services:

> Hi,
>
> On the MSTSC client TS gateway tab you now have the option
> "bypass TS gateway server for local addresses"
>
> My question is, what does the client concider to be local? when
> does it decide yes i need to use the TS gateway or no i don't i
> can directly connect?
>
> 1) does it look at the local NIC subnet

local = on the local network
From:

Configuring the TS Gateway Core Scenario
http://technet.microsoft.com/en-
us/library/cc754252.aspx#BKMK_ConfigureRDCSettings_TSGateway

Bypass TS Gateway server for local addresses. This option is
selected by default.
If you want the Terminal Services client to automatically detect
when TS Gateway is required, select this check box. If you use a
mobile computer, selecting this option will optimize client
connectivity performance and minimize latency because TS Gateway
will only be used when it is required. If your computer is always
connected to the local area network (LAN) or if it is hosted inside
the internal network firewall, TS Gateway will not be used. If you
are outside the internal network and connecting to the internal
network over the Internet, TS Gateway will be used.
If you are in a LAN, but want to test connectivity through a TS
Gateway server or TS Gateway server farm, clear this check box.
Otherwise, the client will not connect through the TS Gateway
server or TS Gateway server farm in this case.


> 2) does it look at AD sites and services
> 3) does it do some sort of connection test
> 4)....
>
> what determins the local yes or no answer?
>
> As a second question i see you can select auto detection for TS
> gateway, but how does this work?
>
> 1) does it broadcast for a TS gateway
> 2) does it query AD for TS gateway servers
> 3) does it look at specific DNS records
> 4)...

From the same TechNet article:

Automatically detect TS Gateway server settings (default).
If you select this option, the Terminal Services client attempts to
use Group Policy settings that determine the behavior of client
connections to TS Gateway servers or TS Gateway server farms, if
these settings have been configured and enabled. For more
information, see the "Using Group Policy to Manage Client
Connections Through TS Gateway" topic in the TS Gateway Help.

_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

 

[Joerg Schiffer]

Re: bypass local addresses and auto detect TS gateway

Hi,

We?re also testing Windows Terminal Services 2008, and it seems like the
option "bypass TS gateway server for local addresses" is not working as
it should.
If we test a connection with TS WebAccess across a TS Gateway with the
option enabled, the client is trying to connect the server (farm)
directly and after 1,5 minutes it is trying the gateway.
If we disable the option, the client immediately uses the Gateway and
the response time is ok.
We test the connection from a Home-Office, which is not integrated in
our network infrastructure. The internet connection is based on another
provider. So in my understanding, there should be no reason, why the
client is trying to connect the server (farm) directly.

Best greetings

Joerg