IPSec internet traffic not via tunnel

[nkraft]

Hi there,

I have an existing IPSec connection that works in tunnel mode via 0.0.0.0/0.
Remote LAN and Internet are routed via the tunnel.
But I don't want to route the internet traffic through the tunnel. Only the Remote LAN 192.168.0.0/24 should be accessible. I need some advice on how to do that.
IPSec works with IKEv2 and EAP because Windows supports VPN.
Windows Client Config /My Solution
Set-VpnConnection -Name "OPNSENSE" -SplitTunneling $True
Add-VpnConnectionRoute -ConnectionName "OPNSENSE" -DestinationPrefix 192.168.0.0/24 -PassThru

Best Regards Norman