XPost: comp.dcom.sys.cisco   
   From: stephen@dino.dnsalias.com   
      
   Ted Nevil  writes:   
   > rashidaq@gmail.com wrote:   
   >>  How do you split tunneling on what concentrator ?   
   >> Does this mean that I cant do nothing on my computer ?   
   >> to make this happen   
   >>   
   > Hi   
   >   
   > Right, you can't do anything.   
   > Split tunneling must be configured on the vpn concentrator (where you   
   > dial in).   
   >   
   > mostly this is disabled for security reason.   
      
   Whether the client can do anything depends on the VPN client not on   
   the VPN concentrator since it is the VPN client that ultimately   
   controls how traffic is routed on the client.  Typically if the VPN   
   administrator does not want split tunnelling to be used then they   
   don't configure on the VPN concentrator and provide a VPN client   
   program that provides no way of turning it on.   
      
   However, if the authentication details can be extracted from the VPN   
   client then they can be used with a client that does support split   
   tunnelling even if the VPN concentrator is not configured to support   
   it.   
      
   Not surprisingly such VPN clients are not popular with VPN   
   administrators since it allows users to override the administrator's   
   policy.  So, they can make life difficult by making the authentication   
   details hard to extract from the VPN client they provide and/or using   
   vendor specific/proprietary authentication mechanisms that other VPN   
   clients do not support and/or require that you sign something that   
   says you will only use approved software for VPN access.   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)