Control VPN Access inside 3002

[bryceiu]

Is there a simple way to control what IP ranges have access to the VPN tunnel from the inside of a 3002 hardware client. Example, I want to give 192.168.10.2-128 access to the tunnel but deny 192.168.10.129-253 but still give them all access to the Internet. Is this possible without extra hardware?

[irisrios]

You could use split tunneling which allows users to directly access the internet without using the vpn tunnel.

Here is an config example for it. Configuring Cisco VPN Client 3.5 and the Cisco Integrated Client to Secure Nonencrypted Traffic While Using Split Tunneling

http://www.cisco.com/en/US/products/hw/vpndevc/ps2284/products_configuration_example09186a0080094b02.shtml