12-28-2015 04:50 AM
Hello Everyone,
We're facing one issue related with Split-tunneling. Our VPN profile has split tunnel enabled with only allowed networks to be entered through tunnel and internet traffic is going locally. Now this is working fine almost for 90% of user but some users are unable to access the internet when they connected to VPN.Intranet is working fine. Below are some observations from affected user's machine:
1. When try to ping any public FQDN (E.g. google.com) it doesn't get resolved but when i try to ping with IP address it works.
2. Most users are accessing VPN from home internet connection who are on WiFi networks typically 192.168.1.0/24 network.
3. This issue is only faced by some users, other users who also connect to VPN via home WiFi can successfully access both internet & intranet.
4. Route print from users machine shows default gateway towards WiFi router (192.168.1.1 or private IP). DNS is also the same.
5. Took a packet capture from users machine on both AnyConnect adapter & WiFi adapter. After analyzing the captures it has been seen that public DNS queries are not seen in the capture which was ran on WiFi adapter.
Any guess what could be the problem?
Any help will be appreciated.
Thank You.
Regards,
Gaurav
Solved! Go to Solution.
01-26-2016 11:09 AM
Gaurav,
Have you tried disabling the IPv6 option under the physical adapter?
01-29-2016 08:58 AM
Hi Gaurav,
Have you tried the following command under the group-pollicy:
client-bypass-protocol enable
This should fix the problem without disabling the IPv6 feature on the adapter.
01-31-2016 10:23 PM
Thanks Sebastian. Will check it.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide