Does the USG Flex H model support multiple split tunnels for the Windows native VPN client?

Zyxel_Jeff

Question:

Does the USG Flex H model support multiple split tunnels for the Windows native VPN client?

Answer:

Yes, the user can modify the VPN configuration file to enable this feature.

Step 1: Ensure the remote VPN connection is configured as a Full Tunnel, and download the Windows VPN installation script from the uOS firewall.

Step 2: Set the split tunnel flag to true, and add multiple destination subnets, such as 192.168.168.0/24 and 192.168.169.0/24.

set SplitTunneling=$True
set Destination="192.168.168.0/24"
set Destination2="192.168.169.0/24"

Add the corresponding routes accordingly.

powershell -ExecutionPolicy Bypass -command "Add-VpnConnectionRoute -ConnectionName '%Name%' -DestinationPrefix '%Destination%' -PassThru"

powershell -ExecutionPolicy Bypass -command "Add-VpnConnectionRoute -ConnectionName '%Name%' -DestinationPrefix '%Destination2%' -PassThru"

Step 3: Install the script file and establish the VPN connection. Then, verify successful connectivity by pinging the multiple subnets.

Check the routing status using the CLI command route print, and verify that the subnets 192.168.168.0/24 and 192.168.169.0/24 are routed through the VPN subnet's gateway IP address 192.168.50.1.