ASA 5520 Version 8.2(1) Split tunnel enable Process

Md.Mosharof Hossain — Tue, 12 Mar 2019 02:43:51 GMT

Hi,

We have configured a cisco ASA 5520 firewall as a remote VPN. Remote VPN user connected properly but VPN user disconnected form internet. So we need to configure split tunnel. Please help us how to configure split tunnel and require parameters/field. Thanks...

ASA 5520 Version 8.2(1) Split tunnel enable Process

Jouni Forss — Thu, 26 Sep 2013 07:50:49 GMT

Hi,

The setup is usually pretty easy

First you should create a Standard ACL that defines the networks which are found behind the VPN connection from the users perspective. In other words the networks that need to be tunneled.

For example if your LAN networks was 10.0.0.0/24

access-list SPLIT-TUNNEL standard permit 10.0.0.0 255.255.255.0

Then you would need to configure some additional things in your VPN client connections "group-policy"

For example

group-policy CLIENT attributes

split-tunnel-policy tunnelspecified

split-tunnel-network-list value SPLIT-TUNNEL

The above would essentially handle the Split Tunnel portion of the configurations. The "split-tunnel-policy" command specifies how the network selection for the VPN is handled. It might aswell be configured to specify Full Tunnel or to simply Exclude some networks. The "split-tunnel-network-list value" command tells the ASA the networks used in the Split Tunnel (the ACL we created)

Hope this helps

- Jouni

ASA 5520 Version 8.2(1) Split tunnel enable Process

Md.Mosharof Hossain — Sun, 29 Sep 2013 04:17:32 GMT

Hi Jouni,

Thanks for your help. Now the split tunnel is working...

topic ASA 5520 Version 8.2(1) Split tunnel enable Process in Network Security

ASA 5520 Version 8.2(1) Split tunnel enable Process

ASA 5520 Version 8.2(1) Split tunnel enable Process

ASA 5520 Version 8.2(1) Split tunnel enable Process