Hi,

First of all, the VPN client pool range should not be the same as Internal hosts subnet range. That highly not recommended.

Suppose you chose the client pool as 192.168.2.0/24. For internet traffic of clients to go through the router, and for clients to access 192.168.1.0/24 subnet, following changes need to be done in your config.

1: Create two ACLs

access-list 121 permit ip 192.168.1.0 0.0.0.255 192.168.2.0 0.0.0.255

and

access-list 122 deny ip 192.168.2.0 0.0.0.255 192.168.1.0 0.0.0.255

access-list 122 permit ip 192.168.2.0 0.0.0.255 any

2: Create a two loopback intf:

int loopback 1

ip address 1.1.1.1 255.255.255.0

exit

int loopback 2

ip address 2.2.2.1 255.255.255.0

ip nat inside

exit

3: Create two route-maps:

route-map polnat permit 10

match ip address 121

set ip next-hop 1.1.1.2

exit

route-map polnat2 permit 10

match ip address 122

set ip next-hop 2.2.2.2

exit

4: Apply the polcices on the LAN and WAN interfaces:

On LAN intf :

interface Ethernet0/1

no ip access-group 101 in

ip policy route-map polnat

exit

On WAN intf :

interface Ethernet0/0

ip policy route-map polnat2

exit

**************************************************************

Complicated though....but that should do it !!

*Please rate if helped.

-Kanishka