Default Gateway on VPN Client

[rwamstutz]

All,

I am running a Pix 515 with 6.3 code. When the VPN Connection is established, the default gateway on the PC is the same as the IP Address on the PC. The VPN Connection is made on the Internet Line in and the Internet Traffic, would obviously be on the same internet line, going out. First, is it possible to be able to establish internet connectivity while being VPN'd in, and if so, how. Much Appreciated.

[a.kiprawih]

You can use the split tunnel feature where you can define which traffic (src/dest) to encrypt and what not to encrypt.

Basically, you need to define this via ACL, for example, encrypt only 10.1.1.0 accessing 10.1.100.0. Other than that, do not encrypt and should flow outside the tunnel:

access-list splittunnel permit ip 10.1.1.0 255.255.255.0 1.1.100.0 255.255.255.0

nat (inside) 0 access-list 80

More details/example on this is available at:

http://www.cisco.com/en/US/products/sw/secursw/ps2120/products_configuration_guide_chapter09186a0080172787.html#wp1076294

HTH

AK