Enable Split Tunnel

[rodger rau]

Cisco 4000 series router.  All traffic is going over DMVPN tunnels back through our main data center.  Would like to route Internet traffic straight out the Internet interface and corporate destined traffic over the tunnels.  I lose access to the site with the below configuration.  Am I missing something?

interface GigabitEthernet0/0/0.52 (inside interface)

 ip address 192.168.52.1 255.255.255.0
 ip nat inside
 ip virtual-reassembly

interface GigabitEthernet0/0/1 (outside interface)

 ip address x.x.x.x (ISP IP)

 ip nat outside
 ip virtual-reassembly

ip nat pool internet x.x.x.x (ISP IP) x.x.x.x (ISP IP) netmask 255.255.255.252
ip nat inside source list internet pool internet overload
ip route 0.0.0.0 0.0.0.0 x.x.x.x (ISP gateway ip)

ip access-list extended internet
permit ip 192.168.52.0 0.0.0.255 any
permit ip 192.168.53.0 0.0.0.255 any
 

[Georg Pauwen]

Hello,

I have tried to recreate your setup but to be honest, I cannot really figure out why you have configured the VRF on the DMVPN tunnel. What is the purpose ? Either way, without the VRF, you would simply need a static default route pointing to the Internet facing interface (or the next hop IP address of that interface):

ip route 0.0.0.0 0.0.0.0 GigabitEthernet0/0/1