[c-nsp] PIX/ASA full tunnel for clients

2009-04-29 Thread Justin Shore
I've got what's probably a simple question that I just can't figure out. Is there a trick for setting up a full tunnel client VPN profiles (ie, no split tunneling?) on a PIX or ASA running v7 or better? I used to do this on VPN 3000 Concentrators with ease but my searches on cisco ASA ipsec

Re: [c-nsp] PIX/ASA full tunnel for clients

2009-04-29 Thread Jason Link
] PIX/ASA full tunnel for clients I've got what's probably a simple question that I just can't figure out. Is there a trick for setting up a full tunnel client VPN profiles (ie, no split tunneling?) on a PIX or ASA running v7 or better? I used to do this on VPN 3000 Concentrators with ease but my

Re: [c-nsp] PIX/ASA full tunnel for clients

2009-04-29 Thread Michael K. Smith - Adhost
Hi Justin: -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Justin Shore Sent: Wednesday, April 29, 2009 11:30 AM To: 'Cisco-nsp' Subject: [c-nsp] PIX/ASA full tunnel for clients I've got what's probably a simple question

Re: [c-nsp] PIX/ASA full tunnel for clients

2009-04-29 Thread Ryan Hughes
Not really - simply don't specify a split tunnel policy under the group-policy for the Remote Access group on the ASA. group-policy RAS attributes dns-server value X.X.X.X vpn-tunnel-protocol IPSec split-tunnel-policy excludespecified ! don't need split-tunnel-network-list

Re: [c-nsp] PIX/ASA full tunnel for clients

2009-04-29 Thread Justin Shore
Jason, Michael, and Luan, Thanks for the replies. That's exactly what I was looking for. I never looked for a sub-option under the split-tunnel config. I figured there was an alternate command to the split-tunnel command that I just couldn't find. Thanks again Justin Jason Link