AltocumulusHi all
I've configured a network-access VPN and used split tunneling for traffic.
now in IPV4 LAN Address Space added X.X.X.X and in DNS Address Space added example.com that linked to the IP
knowing that example.com is a public site but it's only accessible from my company local network that why i needed split tunneling
but it's not working so did I missed something?
MVPCould be several things. First time is to determine if the traffic actually goes to the right place.
If you try to access the website from a client with APM client active do you see traffic for it on the BIG-IP? tcpdump is your friend here.
MVPI second boneyard suggestion to troubleshoot with tcpdump what is going on the wire. I just wanted to add that when you add example.com to the DNS Address Space list you are telling your client to make DNS resolution request for that domain through the tunnel using your internal DNS, so you need to make sure your DNS traffic is allowed to reach your DNS servers. If this is not what you want, you can leave this list empty and rely on public DNS resolution.
Also, if you use DNS Address Sapce, make sure when you generate the client package that "DNS Relay Proxy Service" is enabled