My university offers a remote access VPN to access paywalled journals, which I often want to use. However they require using the Cisco AnyConnect protocol.

This is a bit annoying because it effectively disconnects and reconnects every connection I have and routes it through the university server.

Is it possible to somehow connect to the VPN in a way where I can define that just the browser will go through the VPN, rather than everything? For example some tunneling trick which will allow me to run a proxy server and connect to it from my browser.

(My Linux is Arch Linux on x86_64, if that matters somehow.)


Have a look at this. The Cisco client will try to enforce administrator policy *note that working around that may well be a violation of academic conduct

[https://askubuntu.com/questions/55791/configuring-cisco-vpn-anyconnect-to-use-vpn-and-the-local-network-simultaneously 1

| improve this answer | |
  • Welcome to Unix & Linux Stack Exchange! Whilst this may theoretically answer the question, it would be preferable to include the essential parts of the answer here, and provide the link for reference. – slm Feb 17 '14 at 5:17
  • I don't see how this can be a violation of academic conduct. The whole point of these remote access proxies is to allow the good folks of the academia work from places which are not physically in the university. – Sterling Archer Feb 17 '14 at 5:27
  • More than likely, your network/security admins have made a decision to not allow split tunneling while connecting to their network. Trying to get around their security restrictions tends to make network/security admins cranky... – Hunter Eidson Feb 18 '14 at 3:11
  • @Hunter: I see. Well, between making the sysadmin cranky and "violation of academic conduct" there's a few parsecs of distance. :-) – Sterling Archer Feb 18 '14 at 18:19
  • True, but there's always the possibility that they file a complaint with your dean (or whoever is appropriate) for violating university policy. At that point the distance can shrink rather quickly... – Hunter Eidson Feb 18 '14 at 19:03

From your description, maybe the default gateway was replaced by the VPN gateway, or there's a route table entry that has a very small netmask value which causes most traffic been redirected to VPN gateway (for example via VPN_GATEWAY).

Look at the output of ip route, and see which situation it is. You'll need to delete that "default" traffic redirect entry and add the ip range of your campus network to let them go through the gateway.

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.