Re: [c-nsp] VPN (hopefully quick) question... split vs nosplit tunnel

2010-05-14 Thread Adrian Chung
nsp@puck.nether.net Sent: Fri May 14 19:41:32 2010 Subject: Re: [c-nsp] VPN (hopefully quick) question... split vs nosplit tunnel ASA is easy with same- security intra-interface and nat (outside) 1 for example. Sent from handheld. On May 14, 2010, at 7:33 PM, "Nick Hilliard"

Re: [c-nsp] VPN (hopefully quick) question... split vs nosplit tunnel

2010-05-14 Thread Ryan West
ASA is easy with same- security intra-interface and nat (outside) 1 for example. Sent from handheld. On May 14, 2010, at 7:33 PM, "Nick Hilliard" wrote: > On 14/05/2010 23:54, Michael K. Smith - Adhost wrote: >> I don't think you can get traffic from VPN clients to route through >> the >> t

Re: [c-nsp] VPN (hopefully quick) question... split vs nosplit tunnel

2010-05-14 Thread Nick Hilliard
On 14/05/2010 23:54, Michael K. Smith - Adhost wrote: > I don't think you can get traffic from VPN clients to route through the > tunnel back out to the Internet. On the ASA you can use the > 'same-security-traffic permit intra-interface' command. On the older > devices, all you can do is make su

Re: [c-nsp] VPN (hopefully quick) question... split vs nosplit tunnel

2010-05-14 Thread Michael K. Smith - Adhost
> From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp- > boun...@puck.nether.net] On Behalf Of Jeff Kell > Sent: Friday, May 14, 2010 2:32 PM > To: cisco-nsp > Subject: [c-nsp] VPN (hopefully quick) question... split vs nosplit > tunnel > > I have an old PIX 515E that has been se

[c-nsp] VPN (hopefully quick) question... split vs nosplit tunnel

2010-05-14 Thread Jeff Kell
I have an old PIX 515E that has been serving as a VPN endpoint for more years than I can remember, but bottom line is I haven't touched the config in ages. All of the configured VPN groups are split-tunnel configurations, bringing only selected internal networks in from the client. I'm trying to