topic adding a static route on a remote vpn client connection in Network Security

adding a static route on a remote vpn client connection

brianbono — Mon, 11 Mar 2019 11:05:23 GMT

is it possible to add a static route for my remote vpn clients so that when they tunnel through my network they can still access an extra subnet in my network?

currently i have two subnets in my network. one has a full tunnel client-to-site vpn connection and now we have this need to allow users to be able to access the other subnet the we have in the network.

if this is possible how do i go about it?

thanks

adding a static route on a remote vpn client connection

Jack Kintz — Sat, 21 Dec 2013 05:54:57 GMT

Did Cisco support ever answer your question? I have a similar issue and cannot seem to get a clear answer to it.

adding a static route on a remote vpn client connection

zalkurdi — Sat, 21 Dec 2013 11:12:07 GMT

Hello,

If I understood you correctly, you want VPN clients to access an extra network behind the Firewall or router. Correct?

If that is the case, on the firewall or router, you need to add a standard access list with the source IP being the internal networks that you want to access through the tunnel from the clients. Then you need to go under the group policy and create a split tunnel list using the ACL you created before.

Like so:

ciscoasa(config)#group-policy  attributes
ciscoasa(config-group-policy)#

Specify the split tunnel policy. In this case the policy is tunnelspecified.

ciscoasa(config-group-policy)#split-tunnel-policy tunnelspecified

Specify the split tunnel access list. In this case, the list is

Split_Tunnel_List.

ciscoasa(config-group-policy)#split-tunnel-network-list value Split_Tunnel_List

This way you tell the VPN client, in order to access those networks, use the VPN tunnel.

Hope this helps.