Set up Split Tunnel on Cisco 8xx router with L2L remote access to VPN 3030

[jkoven]

I've got a remote site with an 871 router. it is connected via an ipsec tunnel back to my head end VPN 3030 concentrator. all traffic is sent over the tunnel. i would like to break off traffic that is not destined for the head-end LAN and point it straight to the internet.

Please help me with IOS config on the remote router.

thanks in advance.

[pkaretnikov]

static routing should take care of the issue. Instead of using the 0.0.0.0 route pointing into your tunnel, only set up route(s) that are on the other side of the tunnel, to use the tunnel.

it will end up being something like this if you want to keep it simple. Depending on your security stance it can get much more complicated.

This example assumes that your company is using the 192.168.0.0/16 network.

ip route 0.0.0.0 0.0.0.0

ip route 192.168.0.0 255.255.0.0

It's hard to get too much more specific without seeing some configs.