vmx azure anyconnect subnet

[jimg3]

Set up a vmx with a /28 subnet on an existing vnet. 

Need to configure anyconnect  -  it obviously can't be on the /28.

Does the anyconnect address space need to be within the existing vnet?

[PhilipDAth · Accepted solution]

No.  In fact it can't be.  It should be a unique address not in use anywhere.  Azure will need a route to the VMX for this subnet.

AnyConnect should be configured to do split tunnelling.

[jimg3]

Thanks Philip.