Cisco Easy VPN - Split Tunneling Issue 4

[JRosario78]

Hi All,

I configured a 2600 router as a firewall and Easy VPN Server. I can connect but I noticed that if I configure split tunneling, I cannot access other networks in the LAN. If I do not enable split tunneling, I can access the other networks but can not access the internet.

Can someone please help me with this issue?

Thanks!

 

[Minue]

Can you please post your updated conf.

Regards

 

[Minue]

Hello
I have revised your old conf ,and I have noticed that your local clients and VPN clients are using the same
subnet.
ip dhcp pool VPN-DHCP
import all
network 172.23.1.0 255.255.255.224

ip local pool SDM_POOL_1 172.23.1.10 172.23.1.30

This seems to be causing the problem.Normally you would have the VPN clients on a different subnet.
Also if I may as ask,Why are you using a public range for inside host.
Regards

 

[Minue]

Hello
Disregard the last question in my former post.I confused the 2 octet with something else.

Regards

 

[Minue]

Hello
I think I have figured out your problem.From the begining I thought you needed access to the local LAN.But reading your post carefully I have noticed that it's the remote LAN behind the VPN server.In any case the below commands will fix the problem:


access-list 102 permit ip 10.5.1.0 0.0.0.255 any
access-list 102 permit ip 192.168.1.0 0.0.0.255 any
access-list 102 permit ip 192.168.2.0 0.0.0.255 any
access-list 102 permit ip 192.168.3.0 0.0.0.255 any

Remember to take out "Allow local LAN Access" on the VPN client.And remove "include-local-lan" on the VPN server.

Regards

 

[okaybye76]

Did you find a solution to this? I am having the exact same problem.

 

[burtsbees]

Please start a new post, including a scrubbed sh run.

Burt