cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1373
Views
0
Helpful
2
Replies

cisco router remote access vpn split tunneling stopped working after ip cef command

Nilesh Joshi
Beginner
Beginner

Hi,

on cisco router we configured remote access vpn but after configuring

ip  cef  command  split tunneling stopped working

So please anybody have any solution

interface Loopback 0

  ip address 10.1.1.1 255.255.255.0

  ip nat inside

ip access-list extended ACL-OUTSIDE-PBR

  deny ip 10.9.0.0 0.0.0.255 10.10.10.0 0.0.0.255

  permit ip 10.9.0.0 0.0.0.255 any

route-map RM-OUTSIDE-PBR permit 10

  match ip address ACL-OUTSIDE-PBR

  set ip next-hop 10.1.1.2

interface FastEthernet 0/1

  ip policy route-map RM-OUTSIDE-PBR

ip access-list extended ACL-POLICY-NAT

  permit ip 10.9.0.0 0.0.0.255 any

p access-list extended ACL-POLICY-NAT

  9 deny 10.10.10.0 0.0.0.255 10.9.1.0 0.0.0.255

ip access-list extended SPLIT-TUNNEL

  permit ip 10.9.1.0 0.0.0.255 10.10.10.0 0.0.0.255

ip local pool VPNSPLITPOOL 10.9.1.1 10.9.1.254

crypto isakmp client configuration group vpnsplit

  key *********

  dns 4.2.2.2

  acl SPLIT-TUNNEL

  pool VPNSPLITPOOL

Nil

2 Replies 2

Jennifer Halim
Cisco Employee
Cisco Employee

Sounds like a bug to me if you enable "ip cef" and split tunnel stops working.

Pls upgrade your router to a later version and it should resolve the issue.

Hi,

I agree with Jennifer, an upgrade may fix the issue, but instead of going straight to it, could you please provide the "show ip route", "show run | inc ip route" and "show arp", during a VPN connection test?

I would like to verify a couple of things

Thanx.

Portu

Sent from Cisco Technical Support Android App

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Recognize Your Peers