split tunneling

Jun 22, 2006 3 Replies
B

Dear All

I am trying to etup split tunneling for our VPN Users at work. I feel my config is correct but I does not work. I was looking for some feedback and maybe what I might be missing. I have pasted the relevant parts of my config below. If you require anymore pls let me know.

Best Regards

Bhavesh

vpngroup ITIVPN address-pool vpnpool1

vpngroup ITIVPN dns-server 199.100.1.31 199.100.1.33

vpngroup ITIVPN default-domain ITI-AB.com

vpngroup ITIVPN split-tunnel ITIVPN_splitTunnelAcl

vpngroup ITIVPN split-dns iti.arabbank.plc arabbank.plc

vpngroup ITIVPN idle-time 1800

vpngroup ITIVPN max-time 1800

vpngroup ITIVPN password ********

access-list ITIVPN_splitTunnelAcl permit ip any any

access-list ITIVPN_splitTunnelAcl permit ip ITI 255.255.255.0 any

access-list ITIVPN_splitTunnelAcl permit ip 10.100.100.0 255.255.255.0 any

Vote
Twitter Facebook LinkedIn
W

Hi There,



I need to define Split Tunneling on site to site vpn. Could any one please provide with some relevant links on Cisco Pages. I had a look at few but nit able to find any sample configuration.



Any Advice/help would be highly appreciated.



Thanks in adavance ! AA



Vote
Twitter Facebook LinkedIn
W

Which product and which software release?

Vote
Twitter Facebook LinkedIn
W

Thinking again, that request only makes sense if you are using PPTP for the site to site VPN, rather than IPSec. If you are using IPSec (or L2TP Over IPSec, or EzVPN) then just change your crypto map ACLs to only include the traffic you want to go over the link.

Vote
Twitter Facebook LinkedIn

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required