title: Route only certain IP range with VPN connection
body: <p>We are using <code>FortiClient</code> to connect to one of our client's VPN. Unfortunately, <code>FortiClient</code> is routing <strong>all the traffic over VPN as default</strong>. </p>
  
  <p>We have found a way around it, for Linux. After connecting with VPN we run:</p>
  
  <pre><code>sudo route del default ppp0
  sudo route add -net 172.20.0.0 netmask 255.255.0.0 dev ppp0
  </code></pre>
  
  <p>And now, only the addresses starting with <code>172.20.x.x</code> are resolved over VPN connection.</p>
  
  <p>Now, I am using <code>FortiClient 5.4</code> on <code>Mac OS X 10.11.6</code> and I am trying to remake the above to work on <code>Mac OS X</code>. Basically I have problems even with the first step. I have tried:</p>
  
  <pre><code>sudo route delete -net default -ifp ppp0
  </code></pre>
  
  <p>But the routing still does not work expected. Easily to test, because there is no Internet connection behind the VPN - I can not browse/ping any website :-).</p>
  
  <p>What am I doing wrong? Thanks for help!</p>