Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Help with VPN config (attached)

Hi,

I have this working config from a Cisco 877 DSL router (remote office) which is in VPN mode connected to a Cisco ASA (HQ with servers).

Now users can conenct to all the servers at the HQ, but their internet access also goes of the VPN, how can I split the traffic so all requests to our HQ servers goes over the VPN and all Internet requests go on through the local DSL of the router?

1 REPLY

Re: Help with VPN config (attached)

If the config that you pasted here is from one of those 877 remote offices then to "split" the internet traffic from the corporate traffic, you need to change your match address 110 from:

access-list 101 permit ip 172.19.19.0 0.0.0.255 any

To

access-list 101 permit ip 172.19.19.0 0.0.0.255

Having the match address 101 with the destination as any, will make internet traffic to be part of that ANY keyword.

109
Views
0
Helpful
1
Replies
CreatePlease login to create content