Hello Julien: > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:cisco-nsp- > [EMAIL PROTECTED] On Behalf Of julien leroiso > Sent: Friday, June 06, 2008 7:19 AM > To: [email protected] > Subject: [c-nsp] EnableLocalLAN don't work > > Hello, > > I have a cisco 871 as VPN end-point. > I need to access my local lan, when my vpn is up. > I'm using vpn-client 5.0.01.0600 for Windows on XP. > > I tried to enable "Allow local lan access" but that don't work much. > > I found that I need to enable split tunneling. I found doc to do that > on vpn concentretor or pix, but I did not found anything for "simple" > routers. > > Any idea ? > crypto isakmp client configuration group <GROUPNAME> <various other entries> acl <ACL NUMBER> (150 in the example below)
So, let's say your local lan behind the router is 192.168.1.0/24 and your Pool range is 192.168.2.0/24, your acl would be: access-list 150 permit ip 192.168.2.0 0.0.0.255 192.168.1.0 0.0.0.255 So, any traffic from 192.168.2.0/24 not going to 192.168.1.0/24 will go out the split-tunnel. Regards, Mike
PGP.sig
Description: PGP signature
_______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
