Remote VPN client IP

[bapatsubodh]

Hi,

While configuring the Cisco Remote VPN ( used with VPN client ) we define a pool from which IP's will be assigned to users.

What if the end user is behind another company's router/lan where they have many VLAN/subnets. Now if the user initiates the connection to a IP which is behind  the ASA where VPN tunnel is terminated. This IP is also available in local VLAN's as well. In this case will this packet will be tunneled or will it be sent to a locally available host without any encryption.

How does the client machine knows where to send the packet?  Should it send it to the encrypt tunnel process or normal forwarding packet to default gateway.

Split tunnel can define what packets should be encrypted and which should not but it's not case here.

Please share the experience.

Thanks in advance

Thanks

Subodh

[bala020881]

Let me explain

You have side A with network 10.10.10.0/24 which is local LAN in corporate office from which they are trying to initiate remote access VPN to VPN gateway where split tunneling is not enabled in this case apart from local LAN network 10.10.10.0/24 all other network traffic will be tunneled. If the split tunneling is enabled at VPN gateway only network listed to be tunneled will be encrypted. Hope I explained your question.

Sent from Cisco Technical Support iPhone App