Hello,
I am using a Cisco 2610 as an internet router for my home office. I've configured VPN on it so that I can tunnel traffic to it from outside. I've been using is for years, works like a champ. Now, I would like to change the ACL on the ISKMP client configuration to do something that seems counterintuitive but is really kind of straight forward. I've always used split tunneling as a technique for using a remote site's internet connection while being able to access my home office's resources. Now I would like to do the reverse - access internet through the home office's network but still be able to access the remote site's systems without engaging the VPN tunnel. For lack of a better term, I might call this a reverse split tunnel.
So far, I'm able to route all of my traffic throught the VPN interface by either deleting the ACL (which is not practical) or specifying;
access-list 108 permit ip any any
But this is also too broad because it tells my VPN interface to route everything. I would like to route ALMOST everything except for a list of subnets at the remote site. Can this be done?
