We have a classroom of kids using ipads with an on-demand VPN configured so that all traffic must always route through the VPN. However, it seems Apple classroom does not work with the always-on VPN, as far as I can tell apple classroom works by having the devices talk to each other on the local network. The VPN server is off the intranet so this is failing.
If there was a way to exclude a particular subnet from VPN traffic that would be fine, but I can't find options for this in the VPN plist spec. Alternatively, if there is some way of just excluding apple classroom traffic from going through the tunnel, that would be fine as well. Does anyone know how to resolve this issue?