F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

Miguel_1400's avatar
Miguel_1400
Icon for Nimbostratus rankNimbostratus
Aug 16, 2023
Solved

Vpn Always connected mode

Hello, We have the Big-ip edge client with the Always Connected mode and I would like to know if it's possible to add some exlcusion to allow explicit IP destination to do not pass througt the VPN S...
application delivery
security
  • Paulius's avatar
    Paulius
    Aug 16, 2023

    Miguel_1400 This would only be possible with split tunnel.

Paulius's avatar
Paulius
Icon for MVP rankMVP
Aug 16, 2023

Miguel_1400 This would only be possible with split tunnel.

Miguel_1400's avatar
Miguel_1400
Icon for Nimbostratus rankNimbostratus
Aug 16, 2023

Hello  Paulius

Thank you for your reply 🙂 

Can I configure my Big-IP edge client on Always Connected Mode and use Split tunneling ? Can I configure an Wildcard on the Network acces so all traffic would go thought the VPN SSL and Exclude some IPv4 to pass thougt the local user gateway ?

If yes, this kind of configuration still "best practice" ou it's " bricolage" ?

Regards,

  • Paulius's avatar
    Paulius
    Icon for MVP rankMVP
    Nov 14, 2023

    Miguel_1400 Sadly I'm not familiar enough to know if Always Connected Mode allows for split tunneling but I would imagine it does because it's only how you define traffic that makes it go through a specific path be it a VPN or anything else that's routed. As for a wildcard for include and then choose to exclude wont work because I believe the F5 is configured an include only. Now you can tunnel all and then exclude specific DNS names but that's about it for a combination of include and exclude I believe.