hi @jvazquez-r7 thank you so much for you comments. That option (IpPrioritizeRemote) is the one that allows rasdial to set a new default route pointing to the attacker machine. If you look at the video in the references, a default route with a better metric is added in the route table of the victim machine. So, the MITM is achieved thanks to this option