Broadcast routes to VPN clients

[RandolphKahle]

I am setting up a VPN configuration for a client. Using MX60 and it's client VPN facility.

If the client specifies "send all traffic over VPN" then they can reach computers that are on different VLANs and subnet ranges. I would like to have VPN clients able to >not< send all traffic over the VPN. However, I'll need the VPN connection to broadcast the subnets that are available on the other side of the VPN circuit.

How can I get the VPN circuit to broadcast these address subnets?

Randy

[MRCUR · Accepted solution]

You'll need to configure a split tunnel VPN on the client side with the correct destination networks configured (what you want to send over the VPN). 

See here for how to do this in Windows with PowerShell: https://www.reddit.com/r/meraki/comments/5q32i2/meraki_client_vpn_windows_10_powershell/

Note the "$Destination" variable where you'll define what needs to be routed over the VPN tunnel. 

[RandolphKahle]

Nice. Thank you.

Do you know of an equivalent script for MacOS?

[MilesMeraki]

Check out this article for OSX Split tunnel configuration - https://documentation.meraki.com/MX-Z/Client_VPN/Configuring_Split-tunnel_Client_VPN