Help with Split-Tunnel ACL

Gang, we have clients setup on a VPN, terminated with a PIX 515. Right now, I am not split tunneling.

Is it possible that I setup an ACL to allow a split tunnel for ONLY a few IP addresses.. For example...

I would like my users to hit our external web server without going through the vpn,

but still have to go through our vpn for

I tried something like...

access-list split permit ip any myexternaldomain.com vpngroup roadhog split-tunnel split

that didn't work, and after reading the docs closer, it sounded like the split acl only tells the tunnel what to encrypt.

Thanks for your help

Kilgore

read more and respond »

Posted 5 years ago by troute_kilgore in Cisco Systems

Report misuse