VPN Client 3.x + LOCAL LAN ACCESS

[sk4711]

Hi,

i have a big problem with the VPN Client an the Local LAN Access. I have a Pix 501 (6.22 +PDM 2.1) on the central side. The VPN Clients are some Computers from a other Company with their own Network. The VPN Connection over a DSL WAN connection works great, but the Clients don´t have access to their own LAN. (some Fileserver...) If i allow the Local LAN access on the Cisco VPN Client, it doesn´t matter. I read something about Tunnel-Splitting, but .... i try.... i try....

Thanks for any response... Sebastian

[elijah.savage]

The only thing you can do is allow split tunneling on the pix because the local lan access feature is not supported on the pix just yet.

[sk4711]

Hi,

thanks for your reply. But i just tried that.

I have two networks: The Client Network is 192.168.1.0/24 and the Central Side is 192.168.2.0/24

Do you have a running configuration with tunnel-splitting ?

Regards, Sebastian

[edadios]

You have to do something like:

access-list 101 permit ip 192.168.2.0 255.255.255.0 192.168.1.0 255.255.255.0

vpngroup group_name split-tunnel 101

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_62/cmdref/tz.htm#xtocid12

Regards,