From the course: Cisco Network Security: VPN

Unlock this course with a free trial

Join today to access over 26,400 courses taught by industry experts.

Comparing hairpin vs. split tunnel

Comparing hairpin vs. split tunnel - Cisco Routers Tutorial

From the course: Cisco Network Security: VPN

Comparing hairpin vs. split tunnel

“

- [Announcer] When you establish an always-on remote access VPN from home to the office, the network administrator has additional configuration options so that the client can access resources outside the corporate network and can select either a hairpin or split-tunnel VPN. A hairpin connection is when traffic enters a gateway and the device immediately reroutes the traffic to the internet or another company site, such as in a hub and spoke configuration. We call this configuration hairpin because the traffic pattern resembles a hairpin. When using a hairpin VPN, all traffic must go through an always-on VPN tunnel to the corporate office where it checks any applicable policies and then exits the corporate device to the internet or another company site. The traffic may exit out and go to another office, such as in a hub and spoke configuration. For example, traffic from branch office A will go to the security appliance…

Contents