[ale] cisco vpn help

[Stephen Benjamin]

Ultimately, the Cisco device you're connecting to determines whether you can
do a split-tunnel, but from a security stand point split tunnels are a bad
idea.  I think VPNC doesn't have to obey the rules set by the cisco device
you're connecting to.

I use vpnc + the NetworkManager add-on, it's fantastic.


On Sun, Oct 12, 2008 at 10:38 PM, Jim Popovitch <yahoo at jimpop.com> wrote:

> 2008/10/12 Jim Kinney <jim.kinney at gmail.com>:
> >
> >
> > On Sun, Oct 12, 2008 at 10:19 PM, Jim Popovitch <yahoo at jimpop.com>
> wrote:
> >>
> >> 2008/10/12 Jim Kinney <jim.kinney at gmail.com>:
> >> >  Once the crisco fires up the only net access is through the crisco
> vpn.
> >>
> >> That's a config issue.
> >
> > I thought so too but the one time I _had_ to use a cisco client I never
> > found a way to  set my own default route without disabling the vpn
> tunnel.
>
> I don't currently have a .pcf file to see what the setting is, but the
> solution is that you must manually defined the subnets you want routed
> over the vpn -or- you allow the vpn client to route everything.  IIRC,
> this can be overridden on the vpn concentrator configuration and the
> client can then be forced to route everything.
>
> -Jim P.
> _______________________________________________
> Ale mailing list
> Ale at ale.org
> http://mail.ale.org/mailman/listinfo/ale
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mail.ale.org/pipermail/ale/attachments/20081012/333c4b57/attachment.html