Problems with split-tunnel between VPN client 3.5.1 and Pix 506E 6.1(2)

[alan_kallas]

We can establish a tunnel between the VPN client 3.5.1 and the PIX firewall from a remote address.

If we include split-tunnel functionality, connectivity with the internal network is lost. Removing split-tunnel from the config restores connectivity to the internal network and the VPN tunnel provides proper functionality.

However, these problems do not occur if the VPN client is on the same subnet as the outside interface of the PIX - split-tunnel works correctly.

Any suggestions?

[awaheed]

Hi Alan,

Seems like an issue with the addresses you specify in the split tunnel, try making sure you add both the Networks (One behind the PIX and the NATted) also try changing the address pool on the clients if its part of the Inside network. If these don' t help open up a TAC case and send them the Configs to troubleshoot this further.

Hope this helps,

Regards,

Aamir

-=-=-