300-730 · Question #214
Which command must be run to configure split tunneling when using the AnyConnect client and FlexVPs backend?
The correct answer is D. split-tunnel-network-list value <aclname>. Split tunneling with AnyConnect is configured in the group policy using split-tunnel-network-list to define which networks are routed through the VPN tunnel.
Question
Options
- Asvc split include <network> <mask>
- Broute set access-list <aclname>
- Cvpn-filter value <aclname>
- Dsplit-tunnel-network-list value <aclname>
How the community answered
(40 responses)- A8% (3)
- B3% (1)
- C3% (1)
- D88% (35)
Why each option
Split tunneling with AnyConnect is configured in the group policy using split-tunnel-network-list to define which networks are routed through the VPN tunnel.
The svc split include command is legacy syntax from older ASA WebVPN configurations and is not the current supported method for configuring AnyConnect split tunneling.
route set access-list is not a valid Cisco IOS or ASA command for defining AnyConnect split tunneling behavior.
vpn-filter value applies an ACL to filter all traffic flowing through an established VPN tunnel but does not configure which networks are routed through the tunnel versus bypassed.
The split-tunnel-network-list value <aclname> command, applied under group-policy attributes, references an ACL that defines which destination networks are tunneled rather than sent in the clear. Combined with split-tunnel-policy tunnelspecified, this is the correct and current method for configuring split tunneling for AnyConnect clients with both ASA and FlexVPN backends.
Concept tested: AnyConnect split tunneling network list group policy
Source: https://www.cisco.com/c/en/us/support/docs/security/anyconnect-secure-mobility-client/119006-configure-anyconnect-00.html
Topics
Community Discussion
No community discussion yet for this question.