I'm looking for help on how to set up a VPN with split tunnelling where staff can do the following;
1. Work remotely.
2. Access internal networks through the VPN
3. Access MOST external hosts directly (i.e. not through the VPN)
4. Access some specific external hosts through the VPN
I've got the first 3 working using split tunnelling, but can't figure out how to do the 4th.
The 4th is so that we access some customer sites that have white-listed IPs coming from our company such that we can login with special accounts that have additional privileges.
For example, right now when we access
www.acme.com;
- Directly from home (i.e. with no VPN) we cannot login as our home IP's are not on acme's white-list.
- Via full VPN (i.e. without split-tunnelling) we can login because we came through our companies network, which is in acme's white-list.
- Via split-tunnelled VPN we cannot login because we're back to having our home IP's.
Ideally I like to be able to specify that traffic to the host name "acme.com" is routed through the VPN, rather than having to specify the customer's IP addresses as these can change. However, if addresses are the only way to make it work, that would be OK.
Any help would be most appreciated! Thanks 🙂
