Forum Discussion
VPN BIG-IP Edge client : traffic over VPN tunnel with full or split tunneling
We have established a VPN connection between a Windows client and a BIGIP v15.
We are using BIGIP Edge client, with network access.
Full tunneling
We do not really understand what kind of traffic is allowed or disallowed over the VPN tunnel.
According to this document : https://techdocs.f5.com/kb/en-us/products/big-ip_apm/manuals/product/apm-network-access-13-0-0/2.html
with full tunneling "all traffic (including traffic to or from the local subnet) is forced over the VPN tunnel."
How traffic to local subnet can be forced over the VPN tunnel ?
Does full tunneling ensure that the resource is not leaking traffic to the client's LAN ?
Split tunneling
In order to use split tunneling, we have to fill the field "IPV4 LAN Address Space", to specify a list of addresses. Only the traffic to these addresses goes through the tunnel configured for Network Access, all other traffic bypasses the tunnel.
As this field is mandatory, what is the purpose of the field "Exclude Address Space" (not mandatory) ?
What is the purpose of the feature "split by DNS" ? How to know if it is better to use "split by DNS" instead of "split by IP" ?
- lisa_dNimbostratus
Should I develop my questions ?
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com