This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How can I setup a split-tunnel that only allows

I'm trying to create a split-tunnel whereas my remote ASG120 is setup so that traffic for 4 specific Internet addresses goes directly out to the Internet; everything else must go thru the tunnel back down thru my ASG320 then out to the Internet.

Right now I have the following site-2-site vpn setup: 0.0.0.0/0=70.165.79.16 72.214.66.230=10.209.26.0/24

I'm not sure if (or how) to create a rule that states 'traffic for 64.143.122.36 does not go thru the tunnel but directly to the Internet'.

Thank you in advance [:$])

This thread was automatically locked due to age.

0 BarryG over 16 years ago

I think you should be able to setup static routes for the 4 networks, and have the default route be to the 320.

Barry
Cancel
Vote Up 0 Vote Down

Cancel
0 fsandiego over 16 years ago

I used Any / Any on both sides of the tunnel and then created policy routes.
Cancel
Vote Up 0 Vote Down

Cancel