topic Re: Split tunneling in Network Security https://community.cisco.com/t5/network-security/split-tunneling/m-p/1236992#M840888 <HTML><HEAD></HEAD><BODY><P>post the relevant config for review.</P></BODY></HTML> Fri, 22 May 2009 05:34:23 GMT andrew.prince 2009-05-22T05:34:23Z Split tunneling https://community.cisco.com/t5/network-security/split-tunneling/m-p/1236989#M840884 <P>Hi Expert,</P><P></P><P>I have a requirement which asks for tunneling all traffic from vpn client except for 3 public IP addresses. The Client VPN terminates on ASA 5510 version 7.2(4)</P><P></P><P>The configuration I tried are as below:</P><P></P><P>access-list exclude_1 extended permit ip 10.24.30.0 255.255.255.0 host 202.3.10.210</P><P>access-list exclude_1 extended permit ip 10.24.30.0 255.255.255.0 host 202.3.10.222</P><P>access-list exclude_1 extended permit ip 10.24.30.0 255.255.255.0 host 203.2.190.222</P><P></P><P>group-policy BartterPolicy attributes</P><P> wins-server value 10.1.0.63 10.3.0.1</P><P> dns-server value 10.1.0.63 10.3.0.1</P><P> vpn-tunnel-protocol IPSec</P><P> split-tunnel-policy excludespecified</P><P> split-tunnel-network-list value exclude_1</P><P></P><P>but from the stats - route details it stills shows 0.0.0.0 in the secure routes which means tunnel all traffic.</P><P></P><P>Any idea why this is happening. Thanks in advance.</P> Mon, 11 Mar 2019 15:34:47 GMT https://community.cisco.com/t5/network-security/split-tunneling/m-p/1236989#M840884 k.ramalingam 2019-03-11T15:34:47Z Re: Split tunneling https://community.cisco.com/t5/network-security/split-tunneling/m-p/1236990#M840885 <HTML><HEAD></HEAD><BODY><P>What version of code are you running?</P><P></P><P>try a different approach:-</P><P></P><P>split-tunnel-policy tunnelspecified</P><P>split-tunnel-network-list value exclude_1</P><P></P><P>access-list exclude_1 extended deny ip 10.24.30.0 255.255.255.0 host 202.3.10.210</P><P>access-list exclude_1 extended deny ip 10.24.30.0 255.255.255.0 host 202.3.10.222</P><P>access-list exclude_1 extended deny ip 10.24.30.0 255.255.255.0 host 203.2.190.222 </P><P>access-list exclude_1 extended permit ip 10.24.30.0 255.255.255.0 any</P><P></P><P>HTH&gt;</P><P></P></BODY></HTML> Thu, 21 May 2009 10:35:23 GMT https://community.cisco.com/t5/network-security/split-tunneling/m-p/1236990#M840885 andrew.prince 2009-05-21T10:35:23Z Re: Split tunneling https://community.cisco.com/t5/network-security/split-tunneling/m-p/1236991#M840887 <HTML><HEAD></HEAD><BODY><P>No luck. with this all internal access is not working but Internet access works with any restriction.</P></BODY></HTML> Fri, 22 May 2009 02:34:56 GMT https://community.cisco.com/t5/network-security/split-tunneling/m-p/1236991#M840887 k.ramalingam 2009-05-22T02:34:56Z Re: Split tunneling https://community.cisco.com/t5/network-security/split-tunneling/m-p/1236992#M840888 <HTML><HEAD></HEAD><BODY><P>post the relevant config for review.</P></BODY></HTML> Fri, 22 May 2009 05:34:23 GMT https://community.cisco.com/t5/network-security/split-tunneling/m-p/1236992#M840888 andrew.prince 2009-05-22T05:34:23Z Re: Split tunneling https://community.cisco.com/t5/network-security/split-tunneling/m-p/1236993#M840889 <HTML><HEAD></HEAD><BODY><P>the checkbox on the client for allow local lan needs to be checked. </P></BODY></HTML> Thu, 04 Jun 2009 18:07:15 GMT https://community.cisco.com/t5/network-security/split-tunneling/m-p/1236993#M840889 ryancolson 2009-06-04T18:07:15Z Re: Split tunneling https://community.cisco.com/t5/network-security/split-tunneling/m-p/1236994#M840890 <HTML><HEAD></HEAD><BODY><P>Under splittunneling access list try adding the IP of the gateway on the remote client side</P><P></P><P>Also enable split dns</P><P></P></BODY></HTML> Tue, 09 Jun 2009 19:29:22 GMT https://community.cisco.com/t5/network-security/split-tunneling/m-p/1236994#M840890 srikantganesh 2009-06-09T19:29:22Z