cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
543
Views
0
Helpful
2
Replies

Split Tunnel issue

sgrg07
Level 1
Level 1

Hi, 

On our SSL Anyconnect client VPN set up we have a split tunnel configured to route all traffic for corporate network over the VPN and all other traffic over the local internet gateway.

 

I added a URL's public IP address to the split tunnel with view of routing traffic to the URL  over the vpn instead of breaking out locally. 

 

However this is not working. 

Packet captures on the FW only show  tcp SYN and Retransmission to the IP of the . 

 

Am I missing somehting? Is there a feature I need to enable? 
Any help will be highly appriciated.

 

Kind Regards,

 

1 Accepted Solution

Accepted Solutions

Hi,

In order for the remote access VPN users to access this public IP address through the VPN tunnel, you will also need to configure the command same-security-traffic permit intra-interface to allow the traffic to hairpin and route the traffic out the same interface it came in on. And a nat rule (source and destination interfaces are both outside, or whatever you've called your interface). e.g:-

 

object network RAVPN_USERS
 subnet 192.168.10.0 255.255.255.0
 nat (outside,outside) dynamic interface

 

HTH

View solution in original post

2 Replies 2

Hi,

In order for the remote access VPN users to access this public IP address through the VPN tunnel, you will also need to configure the command same-security-traffic permit intra-interface to allow the traffic to hairpin and route the traffic out the same interface it came in on. And a nat rule (source and destination interfaces are both outside, or whatever you've called your interface). e.g:-

 

object network RAVPN_USERS
 subnet 192.168.10.0 255.255.255.0
 nat (outside,outside) dynamic interface

 

HTH

Hi RJI,
Thanks for the quick response, much appreciated. That did the trick for me :)
Wish you a good rest of the day.
Kind Regards,
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: