cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
336
Views
0
Helpful
3
Replies

Is Alwayson VPN splittunneling possible?

vpersaud001
Participant
Participant

Is it possible to allow alwayson clients access to a specific host with a public IP whether the vpn connects or not? This is for allowing IT support remote access to clients for troubleshooting.

Thanks for any ideas.

VP

3 Replies 3

rizwanr74
Rising star
Rising star

Remote-access vpn-client do not work in such a way, what you like to achieve not doable, no way.

 

When vpn-client connects in, they are given an ip-address from the pool you have defined and so vpn-client receives IP address from the pool but not any public addresses.

 

Hope that answers your question.

Thanks

Hi rizwanr... thanks for responding. Sorry my post may have been a little unclear. I needed alwayson vpn-clients to be able to access specific hosts whether the vpn connects or not. The alwayson VPN is configured to force clients to SBL and tunnel all traffic. The solution is to configure split tunneling and exclude the hosts that should not go over VPN using commands:

split-tunnel-policy excludespecified

split-tunnel-network-list value ACLNAME

This solution does not work. The problem is that always on forces the client to have to connect to VPN before gaining network access. The client does get a DHCP IP but cannot access any other network resources.

Does anyone know of any pre-vpn-login method that would allow an always on client access to specific network resources? I already looked at Secure Desktop Manager without any luck.

Thanks.

 

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Recognize Your Peers