Internet over VPN

[Jason Ryan]

Hello,

I have an EZVPN server setup and it works well. Client can connect to the LAN on the side of the EZVPN server. I do not have split tunnelling on so local LAN access to the client is lost.

Currently when the VPN clien is connected they are not able to get internet through their local LAN or the VPN. I would like it so that they could get internet (WAN) access through the VPN tunnel. Is this possible?

Thank you

[Jouni Forss]

Hi,

So are we talking about a single Client computer connecting with software VPN Client to the VPN Server?

What device is the server? Sadly I am only familiar with the ASA and not so much with the Cisco routers/IOS

On the ASAs you should be able to configure so that a VPN Client connection which is in "Full Tunnel" mode also gets Internet access through the central site

The configurations format depends on your ASAs software level and current configurations.

What is the device you are using as the VPN server? If its and ASA (etc) I can probably provide you with the configuration to enable the use of Internet while connected on the VPN Client.

- Jouni

[Jason Ryan]

Jouni,

It is a Cisco 2911 ISR unfortunately. And you are right, it is a single client connecting (not a site).

Split tunneling works well, but when off and all the traffic going over the VPN, no WAN access if available to the clients.

[Jouni Forss · Accepted solution]

Hi,

Yeah, not really familiar with the Router side of this. I think its probably not working because of NAT rules and/or the router not correctly forwarding the traffic

Heres a couple of links I could find on the subject. Dont know if they are of any help

Router and VPN Client for Public Internet on a Stick Configuration Example

http://www.cisco.com/en/US/products/sw/secursw/ps2308/products_configuration_example09186a008073b06b.shtml

Cisco VPN Client Configuration - Setup for IOS Router

http://www.firewall.cx/cisco-technical-knowledgebase/cisco-routers/809-cisco-router-vpn-client.html

- Jouni