On Thu, Jul 31, 2014 at 3:16 AM, KingLiang Gu <ihipop at gmail.com> wrote: > as the cisco doc says > "http://www.cisco.com/c/en/us/td/docs/security/asa/asa70/configuration/guide/config/vpngrp.html#wp1053494" > split-tunnel-policy has three options ,ocserv supports 2 of them > (tunnelall,tunnelspecified) > is there a possible to support the "excludespecified"? It seems that openconnect (with vpnc-script) doesn't support the exclude option. I'm not really into adding options that are not supported by openconnect (*), but if there is a patch for that, I'll apply it. regards, Nikos (*): not only for ideological, but for practical reasons as they cannot be tested.