> For the complete documentation index, see [llms.txt](https://docs.defguard.net/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.defguard.net/features/wireguard/create-your-vpn-network/split-tunnel-configuration.md).

# Split Tunnel Configuration

To configure split tunnel routing, you need to add the networks that should always route through your VPN connection to the[ Allowed IPs configuration in the VPN Location](/features/wireguard/create-your-vpn-network.md#allowed-ips). You can do this either in the wizard during the location configuration, or by navigating to Locations, clicking on the "..." menu, and selecting "Edit":

<figure><img src="https://464489758-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FtIboBQe0Rz5YT3cHdNlh%2Fuploads%2Fgit-blob-9aaee979fbd3187c2b17317127c155068c731d3c%2FScreenshot%202026-05-22%20at%2021.53.11.png?alt=media" alt="" width="302"><figcaption></figcaption></figure>

And then define the networks in Allowed IPs:

<figure><img src="https://464489758-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FtIboBQe0Rz5YT3cHdNlh%2Fuploads%2Fgit-blob-534d4cb4af4b25de66eba4d62648d1e9c538eeb8%2FScreenshot%202026-05-22%20at%2021.52.17.png?alt=media" alt=""><figcaption></figcaption></figure>

Now any time a user connects to VPN with Predefined Traffic option:

<figure><img src="https://464489758-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FtIboBQe0Rz5YT3cHdNlh%2Fuploads%2Fgit-blob-95048830778898c25ec46fb4126b816c6b58c743%2Fpredefined-traffic-marked.png?alt=media" alt="" width="563"><figcaption></figcaption></figure>

traffic to those networks will go through the VPN, and all other traffic will use the user's default router or internet connection.