topic Re:Configuring Split Tunneling in PIX firewall in Network Security

Re:Configuring Split Tunneling in PIX firewall

CSCO11776584 — Tue, 12 Mar 2019 00:10:31 GMT

Hi,

I have a PIX firewall configured with Site-to-Site VPN. LAN users are able to access the VPN tunnel but internet is not working. I wanted to know the concept of split tunneling and also configuration examples.

Thanks in advance!

Regards,

Prashant

Re:Configuring Split Tunneling in PIX firewall

Jennifer Halim — Wed, 17 Oct 2012 07:36:29 GMT

Normally you don't configure split tunnel on site-to-site VPN, split tunnel is for remote access VPN.

Can you pls share the current config from both end and also advise which end doesn't have access to the internet?

Re:Configuring Split Tunneling in PIX firewall

Jouni Forss — Wed, 17 Oct 2012 09:31:44 GMT

Hi,

You wouldnt by any chance configured a NAT0 / NAT Exemption access-list with the destination address keyword of "any" ?

For example

access-list nat0 permit ip 10.10.10.0 255.255.255.0 any

nat (inside) 0 access-list nat0

Which would basicly not translate any traffic from "inside" to any destination address. Presuming that 10.10.10.0/24 is your LAN network (and only LAN network)

- Jouni