VPN connectivity disconnects as soon as i connect LAN to PC

[karthikneelappanavara]

Hello,
I am facing this problem. When i connect LAN cable to PC, the CISCO VPN connectivity disconnects. What might be the problem.? Is this problem pertain to CISCO VPN or any certificates are to be added to do this. I heard that split tunneling is not allowed. How to solve this issue.? And the IP address is changing, once i connect LAN . Is this because the IP address is changing , VPN connectivity is disconnecting..? How to solve this issue.?
Thanks in advance for help.
Regards,
Karthik N

[Marvin Rhoads]

Most likely your IP address changed when you plugged in the LAN. Why not plug in LAN and THEN establish VPN? That way VPN is established using the wired LAN address.

On the other hand if the VPN policy doesn't allow split tunneling, local network resources will not be available either way.

[karthikneelappanavara]

Hello Marvin ,
Thanks for your reply.
1) I tried connecting LAN first and then VPN next. But VPN is not connecting.
2) The LAN i am using is just for connecting 3 PC's in a network and it is not connected to corporate network.
3) How can i check the VPN policy.? So if there is any solution for allowing split tunneling, let me know.
Regards,
Karthik N

[Marvin Rhoads]

Karthik,

If the LAN cannot connect to the VPN and the VPN admin does not allow split tunneling, than you have no alternative.

You can see the tunneling policy by checking the routes your VPN client has when connected. If 0.0.0.0 0.0.0.0 (all routes) is setup on the VPN client, then you cannot connect to anything but what's allowed at the VPN headend. If that's setup, the end user cannot change it.

If you are using Cisco VPN Client (old IPsec), you will see this under Status, Statistics, Route Details, Secured Routes. With the newer AnyConnect Secure Mobility client, the information shows up the Gear symbol, VPN, Route Details.

Hope this helps, please rate helpful posts.

[karthikneelappanavara]

Thanks Marvin,
Are there any certificates to be added to allow split tunneling.? So any alternative solution for this problem. Or we need to contact the clients for this problem.?
Regards,
Karthik N