I Need To Make A Change With My IT Support! Call (225) 706-8414

Enable Split Tunneling on a Cisco PIX 500 Series

You want to enable split tunneling in a Cisco PIX 500 series, which is often running v6.3.


You need to enable this in the VPN group. Note, this method is slightly different than what is done to enable split tunneling on a newer Cisco PIX or Cisco ASA. This article is based on Cisco’s article on enabling split tunneling on the Cisco PIX.

We’ll assume that you have the IPSEC VPN already configured. Our sample VPN settings are:

vpngroup myvpnpix address-pool dspool
vpngroup myvpnpix dns-server
vpngroup myvpnpix wins-server
vpngroup myvpnpix default-domain example.com
vpngroup myvpnpix idle-time 1800
vpngroup myvpnpix password ********

Notice that our address pool just happens to be within the normal LAN range:

ip local pool dspool

In most situations however, it would be another range, such as:

ip local pool dspool

It doesn’t matter really.

So next we need to setup our split tunnel access list:

access-list split_tunnel_list remark Specify our internal network.
access-list split_tunnel_list remark The first is for the internal network.
access-list split_tunnel_list remark The second is the VPN IP pool. It could have been another range entirely.
access-list split_tunnel_list permit ip

Then, add the split tunneling configuration to the VPN group:

vpngroup myvpnpix split-tunnel split_tunnel_list

Be sure to write the running config to memory so this is preserved across reboots.

Concerned About Cyber Attacks?


Want to Migrate to the Cloud?

Office 365

Ready to Experience Microsoft Office 365?

Want the latest IT news directly in your inbox? Subscribe now!