I have tried this on both Ubuntu 22.04 and 23.10, but in neither case the split-tunnel configuration doesn't work with Cisco Anyconnect VPN. Anyconnect uses 2FA making it difficult to use openconnect.
On debian 12.5 the same configuration works, so it's not the VPN server that's causing the issue, but something specific to Ubuntu. I don't know where to begin troubleshooting. Grateful for any advice or suggestions.