All host traffic going to VPN server in Anyconnect VPN

amanverma · ‎01-30-2018

I have configured remote access anyconnect VPN and enabled IPsec and SSL both via ASDM.

everything is working fine but when user connects to VPN then with ip address VPN sets a default gateway pointing towards ASA IP. so then all internet traffic of user goes to tunnel as well and internet won't work along with VPN.

Attached is running-config of ASA, please check what is the issue.

Seb Rupik · ‎01-30-2018

Hi there,

Try adding the following:

!
access-list ACL_VPN_CLIENT_SPLIT_TUNNEL standard permit 192.168.1.0 255.255.255.0
!
group-policy GroupPolicy_Test attributes
  split-tunnel-policy tunnelspecified
  split-tunnel-network-list value ACL_VPN_CLIENT_SPLIT_TUNNEL
!

...this will configure a split-tunnel sending only traffic destined to your INSIDE 192.168.1.0/24 subnet via the VPN, all other traffic will be routed locally at the client site.

cheers,

Seb.