split-tunnel issue

[sasa.rasovic]

Hi,

I'm having this issue with split-tunneling for VPN client 4.03.

part of PIX config:

access-li 80 permit ip 192.168.1.0 255.255.255.0 192.168.5.0 255.255.255.0

ip local pool vpn 192.168.5.1-192.168.5.200

vpngroup remote_access split-tunnel 80

VPN client does connect, but log shows the following entries:

440 10:09:18.718 03/03/05 Sev=Warning/2 CVPND/0xE3400013

AddRoute failed to add a route: code 87

Destination 192.168.5.0

Netmask 255.255.255.0

Gateway 255.255.255.255

Interface 192.168.5.1

441 10:09:18.718 03/03/05 Sev=Warning/3 CM/0xA310002B

Failed to add Split Tunnel route.

Client is connected but there is no route to 192.168.1.0.

It seems that split-tunnel route add failed.

Anyone knows what seems to be the issue with this?

Thanks,

Sasa

[sasa.rasovic]

OK,

Solved this, but only with 4.6 VPN client. Still not able to get this done with the older client. Anyone?

Thanks

Sasa Rasovic

[mostiguy]

Is the older client on a network that is numbered 192.168.1.0/24? Some clients have problems when the destination network for the tunnel (not the vpn client dynamic ip pool), is the same as their local network ip addressing scheme

[sasa.rasovic]

No. Client is on the different subnet.

S