SSL VPN Full and Split Tunnel Config Question

Unanswered Question
Sep 23rd, 2008
User Badges:

I am Beta testing SSLVPN on an IOS router. The question I have is this:

Is it possiable to have slit and full tunnel configs. It seems that once you create your context and default profile that is all you have either split or full. The books say you can use Radius and assign different profiles but, I would like to give the users a choice (like in the VPN3000 .pcf) of either split or full depending on where they are working from.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
tkuzma1022 Thu, 09/25/2008 - 07:13
User Badges:

Thank-you for your reply. It seems that in the IOS you can have one Context and Profile assocateed to the IPaddree so, xx.xx.xx.1 is full tunnel and it appears that you have to have a second Context / Profile for a split tunnel.

It appears the better choice maybe the ASA for doing SSLVPN

tkuzma1022 Thu, 09/25/2008 - 11:10
User Badges:

Sorry Andrew one more question about your SSLVPN on and ASA.

You have both full and split tunnels running on one interface?


This Discussion