Split Tunneling over remote VPN

SOLVED
RodneyBell
Conversationalist

Split Tunneling over remote VPN

Recently deployed client VPN and find I am unable to access our AWS hosted servers with split tunneling enabled. Works fine with split tunneling disabled, but I am concerned about performance as I scale up VPN users without split tunneling enabled.

1 ACCEPTED SOLUTION
Bettencourt
Meraki Employee
Meraki Employee

I'm not sure if your clients are Windows, but if they are ensure you are not forgetting to add the VPN routes manually or via some preferred 3rd party tool.

 

https://documentation.meraki.com/MX/Client_VPN/Configuring_Split_Tunnel_Client_VPN

 

Note: This configuration involves manually adding entries to a client's route table, and should only be followed by users with a thorough understanding of routing mechanisms.

View solution in original post

4 REPLIES 4
PhilipDAth
Kind of a big deal
Kind of a big deal

That suggests your split tunnel configuration is wrong.  Try out my client VPN wizard:

https://www.ifm.net.nz/cookbooks/meraki-client-vpn.html 

tannermoreno
Conversationalist

Hi RodneyBell

 

I share the official link of Cisco Meraki, to apply Split Tunnel in VPN Clients.

 

https://documentation.meraki.com/MX/Client_VPN/Configuring_Split_Tunnel_Client_VPN 

 

I hope you can resolve your incident. Personally, it has worked correctly for me, with Windows 10 and MX64 and MX84 devices.

 

Regards.

Nash
Kind of a big deal

I strongly recommend Philip's generator. Otherwise, you can use a PowerShell script in Win10 to add the routes you need. I've got a (no longer maintained but valid) script in my signature line that you can steal commands from.

Bettencourt
Meraki Employee
Meraki Employee

I'm not sure if your clients are Windows, but if they are ensure you are not forgetting to add the VPN routes manually or via some preferred 3rd party tool.

 

https://documentation.meraki.com/MX/Client_VPN/Configuring_Split_Tunnel_Client_VPN

 

Note: This configuration involves manually adding entries to a client's route table, and should only be followed by users with a thorough understanding of routing mechanisms.

Get notified when there are additional replies to this discussion.
Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.
Labels