[c-nsp] VPN Client to 1841, default route into tunnel with exceptions

[Marc Haber]

On Thu, Aug 28, 2008 at 11:30:29AM -0700, Michael K. Smith - Adhost wrote:
> Hello Marc:
> 
> > >
> > > ip access-list extended DefaultrouteTunnel
> > >  permit x.x.x.x 0.0.0.255 10.100.100.0 0.0.0.255
> > >  permit y.y.y.y 0.0.0.255 10.100.100.0 0.0.0.255
> > 
> > So that would be
> > 
> > ip access-list extended DefaultrouteWithoutListedNetsTunnel
> >  deny   ip 192.168.8.0 0.0.0.255 10.2.60.0 0.0.0.255
> >  permit ip any 10.2.60.0 0.0.0.255
> > 
> > But packets to 192.168.8.1 still go out through the tunnel.
> > 
> 
> According to your first configuration email the ACL you should use is
> DefaultRouteTunnel, not DefaultrouteWithoutListedNetsTunnel.

I have of course changed the acl statement.

> If you change the client config to 'acl
> DefaultrouteWithoutListedNetsTunnel' using your original parameters
> you should be all set.

NACK. Doesn't work.

Greetings
Marc

-- 
-----------------------------------------------------------------------------
Marc Haber         | "I don't trust Computers. They | Mailadresse im Header
Mannheim, Germany  |  lose things."    Winona Ryder | Fon: *49 621 72739834
Nordisch by Nature |  How to make an American Quilt | Fax: *49 3221 2323190