split tunnelling with anyconnect and ACS

fashour · ‎08-13-2009

we are trying to implement per user split tunneling using ACS. In the past attribute ipsec-split-tunnel-list was used for ipsec clients and that works fine. Tested with any connect and this attribute does not appear to work. Questions:

Is this attribute ipsec specifiec as the name suggest?

what is the alternative?

smalkeric · ‎08-19-2009

The below URL provides step-by-step instructions on how to allow Cisco AnyConnect VPN client access to the Internet while they are tunneled into a Cisco Adaptive Security Appliance (ASA) 8.0.2. This configuration allows the client secure access to corporate resources via SSL while giving unsecured access to the Internet using split tunneling.

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a0080975e83.shtml

fashour · ‎08-19-2009

What I am looking for is to assign split tunnel acl on per user basis by utilizing ACS. I have it working for IPSEC clients by using ipsec-split-tunnel-list radius attribute on ACS. Is there a comparable for Anyconnect?