Default Gateway on VPN Client

rwamstutz — Fri, 21 Feb 2020 09:18:42 GMT

All,

I am running a Pix 515 with 6.3 code. When the VPN Connection is established, the default gateway on the PC is the same as the IP Address on the PC. The VPN Connection is made on the Internet Line in and the Internet Traffic, would obviously be on the same internet line, going out. First, is it possible to be able to establish internet connectivity while being VPN'd in, and if so, how. Much Appreciated.

Re: Default Gateway on VPN Client

a.kiprawih — Thu, 16 Nov 2006 03:06:34 GMT

You can use the split tunnel feature where you can define which traffic (src/dest) to encrypt and what not to encrypt.

Basically, you need to define this via ACL, for example, encrypt only 10.1.1.0 accessing 10.1.100.0. Other than that, do not encrypt and should flow outside the tunnel:

access-list splittunnel permit ip 10.1.1.0 255.255.255.0 1.1.100.0 255.255.255.0

nat (inside) 0 access-list 80

More details/example on this is available at:

http://www.cisco.com/en/US/products/sw/secursw/ps2120/products_configuration_guide_chapter09186a0080172787.html#wp1076294

HTH

topic Default Gateway on VPN Client in Network Security

Default Gateway on VPN Client

Re: Default Gateway on VPN Client