cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
883
Views
0
Helpful
3
Replies

Cannot connect to internet while VPN to network.

gaban
Level 1
Level 1

I have a dsl account and when I vpn in to our network using cisco vpn client to vpn 3015 I cannot access the internet anymore locally. I have to use our network internal proxy server. Is there a way to do the vpn tunnel but also use the local DSL internet connection for browsing?

1 Accepted Solution

Accepted Solutions

gfullage
Cisco Employee
Cisco Employee

You need to set up split tunnelling, so that only certain packets are sent across the tunnel, the rest go out in the clear just as normal packets.

In the 3015 create a Network List under Config - Policy Mgmt - Traffic Mgmt - Network List, this list will include your internal networks (traffic you want to be tunnelled). Then go under the Group that the client is connecting to, under the Client Config tab, select Only tunnel networks in the list and select your list in the drop-down box. Reconnect and you're good to go.

Keep in mind split-tunnelling is considered somewhat of a security risk seeing as your PC is now accessable from the Internet AND you have a VPN straight into your internal network. If someone can take over your PC then they have access to everything. You might want to also look into enabling the client firewall stuff as well.

View solution in original post

3 Replies 3

gfullage
Cisco Employee
Cisco Employee

You need to set up split tunnelling, so that only certain packets are sent across the tunnel, the rest go out in the clear just as normal packets.

In the 3015 create a Network List under Config - Policy Mgmt - Traffic Mgmt - Network List, this list will include your internal networks (traffic you want to be tunnelled). Then go under the Group that the client is connecting to, under the Client Config tab, select Only tunnel networks in the list and select your list in the drop-down box. Reconnect and you're good to go.

Keep in mind split-tunnelling is considered somewhat of a security risk seeing as your PC is now accessable from the Internet AND you have a VPN straight into your internal network. If someone can take over your PC then they have access to everything. You might want to also look into enabling the client firewall stuff as well.

Thanks! I have enabled split tunneling and it works. You mentioned enabling the client firewall. HOw do you do this.