Forced tunneling, a VPN-enabled remote access server configures and creates a push tunnel. When using a mandatory tunnel, the user's computer is not the endpoint of the tunnel. Another device, a remote access server, between the user's computer and the tunnel server is the tunnel endpoint and acts as a tunnel client.