GlobalProtect with X-Auth split tunnelling

IFIconsulting — Wed, 20 Jul 2016 14:16:25 GMT

Hi guys,

I'm working on a GP portal and gateway configuration, in order to provide to the customer full compatibility with the old vpn clients (ex: cisco) I enabled X-Auth support on it.

The client with a third party software authenticates but it always gets a default route 0.0.0.0 and not the single networks specified in the GP Gateway-->Client Configuration-->Network Settings.

If I use the GP client it works withut issues.

What am I missing?

Thank you.

Dario

Re: GlobalProtect with X-Auth split tunnelling

aceandy79 — Thu, 21 Jul 2016 09:07:20 GMT

In some of the documentation for VPNC it describes the split-tunneling scenario, and that where it can see different routes/prefixes being injected by the GlobalProtect gateway, the client will summarise those with a 0.0.0.0/0 route.

topic GlobalProtect with X-Auth split tunnelling in General Topics

GlobalProtect with X-Auth split tunnelling

Re: GlobalProtect with X-Auth split tunnelling