This article explain how to enable Split Tunnelling in Juniper Secure Connect. This feature allows us to selectively route specific traffic through a tunnel while leaving the rest of traffic to follow its regular path.

When configuring Juniper Secure Connect, it's common to have traffic selector configurations where the local IP is set to 0.0.0.0/0. If you have a traffic selector with a local IP of 0.0.0.0/0, it means that all traffic from the client machine will be forwarded via the tunnel. However, in some cases where you want to forward only specific traffic via the tunnel, you need to configure split tunneling.

To enable split tunneling in Juniper Secure Connect, you need to configure a specific traffic subnet in the traffic selector's local IP as follows:
set security ipsec vpn sc-vpn traffic-selector ts-1 local-ip <Specific IP or Subnet>
set security ipsec vpn sc-vpn traffic-selector ts-1 remote-ip 0.0.0.0/0

In case you want to forward traffic via the tunnel for multiple subnets, you need to configure multiple traffic selectors as shown below:
set security ipsec vpn v1 traffic-selector t1 local-ip <x.y.x.w>
set security ipsec vpn v1 traffic-selector t1 remote-ip 0.0.0.0/0
set security ipsec vpn v1 traffic-selector t2 local-ip <a.b.c.d>
set security ipsec vpn v1 traffic-selector t2 remote-ip 0.0.0.0/0