I have an 871 router with SSL VPN (full client) configured and it seems to be working swimmingly, with one exception. I do not want to perform split tunneling. On the contrary, I specifically would like all of my Internet-destined traffic to travel to the router down the SSL tunnel and then, after being decrypted, head back out the same interface it came in on out to the Net (hairpin). This doesn't seem to be working for me.
I've removed all access lists to rule those out.
I've double checked my IP address pool and confirmed it is in the same range as a connected interface. This interface also has the NAT Inside command applied to it and I know that when I'm actually physically connected to the 871 that NAT works great.
Is this just not feasible, or am I possibly missing something here? I'm running 12.4(9)T1.
Thanks, in advance, for any help.