topic Re: AnyConnect client not getting default gateway in Network Security

AnyConnect client not getting default gateway

lcaruso — Mon, 11 Mar 2019 19:49:34 GMT

Hi,

I've just setup my first AnyConnect remote acccess vpn on a 5505 running 8.4(1). Everything works except I'm not getting a default gateway for my remote access vpn connection.I can't see where in the profile to set that up. Can someone point me to that setting please?

Re: AnyConnect client not getting default gateway

songl — Fri, 11 Feb 2011 14:34:25 GMT

Please refer to the following configuartion:

http://www.cisco.com/en/US/partner/products/ps6120/products_configuration_example09186a0080975e83.shtml

Re: AnyConnect client not getting default gateway

PAUL GILBERT ARIAS — Fri, 11 Feb 2011 16:25:41 GMT

as far as I rememeber you won't receive a default gateway on your client. You will get the specific routes to the internal network, this same networks are the ones defined in the access lists for split tunneling. Split tunneling will permit that you can navigate to the internet using your clients internet connection and still be able to comunicate to the networks across the VPN.

Let me know if this answers your question.

Re: AnyConnect client not getting default gateway

lcaruso — Fri, 11 Feb 2011 17:16:48 GMT

thanks!

then I'm not getting the routes I need

this network has a transit network on the inside, not the client's network which is one hop away

so I can't ssh or ping or get to any internal devices on the client's networks after connecting

where do I setup routes for vpn clients ?

Re: AnyConnect client not getting default gateway

lcaruso — Fri, 11 Feb 2011 17:17:20 GMT

sorry we haven't gotten our partner status setup yet but will soon

Re: AnyConnect client not getting default gateway

PAUL GILBERT ARIAS — Fri, 11 Feb 2011 17:23:05 GMT

make sure those networks are included in the split tunnel ACLs and make sure the ASA know how to get to those internal networks.

Re: AnyConnect client not getting default gateway

lcaruso — Fri, 11 Feb 2011 17:42:27 GMT

thanks! must be split tunnel acl since ASA knows all about those networks.

Re: AnyConnect client not getting default gateway

songl — Sat, 12 Feb 2011 02:54:44 GMT

Sorry, I change a avalibale link to you:

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a0080975e83.shtml