How to enable split tunneling in cisco sdwan fabric

[palani2010]

How to enable split tunneling in cisco sdwan fabric

[Flavio Miranda]

Hello @palani2010 

 I believe that split tunneling is a terminology more suitble for standar IPSEC VPN. In SDWAN Cisco use different terminology like collors and TLOC extention

https://www.networkacademy.io/ccie-enterprise/sdwan/tloc-extension

https://www.networkacademy.io/ccie-enterprise/sdwan/tloc-color-and-carrier

[svemulap@cisco.com · Accepted solution]

Split-Tunneling is a term in SD-WAN used, where the traffic from service-side (aka LAN) may be handed-off to local WAN transport interface, for internet-bound traffic.
Have NAT configured on the transport interface with an appropriate data-policy with action accept -> nat use vpn 0

Sample data-policy:

data-policy local-exit
vpn-list V1
sequence 10
match
app-list A1
action accept
nat use-vpn 0
!
!
default-action accept
>> where app-list A1 could be any app as an example (salesforce, youtube etc)

HTH

[Kanan Huseynli]

Hi,

Normally, this term is used for Remote Access VPN (as @Flavio Miranda mentioned). Some SD-WAN vendors use this them as synonym for Direct Internet Access (DIA). However, Cisco normally does not use this term for DIA.

In any case, could you explain please what do you mean by split-tunnel exactly, in which scenario?

For RA-VPN see below:

https://www.cisco.com/c/en/us/support/docs/security/flexvpn/217697-configure-sd-wan-remote-access-sdra-wi.html#anc17