For the Linux folks out there, there appears to be a solution for
   split-tunnel configuration.

   I got the following stand-in replacement for vpnc-script at:
   https://github.com/dlenski/vpn-slice [github.com]

   You can install this with:

   pip3 install https://github.com/dlenski/vpn-slice/archive/master.zip [github.com]

  Note: do this with sudo if you want it in your default path.

   Then, do:

  sudo openconnect --protocol=gp cpvpn.calpoly.edu -s 'vpn-slice 129.65.0.0/14 [129.65.0.0]'

  Can confirm that only Cal Poly's subnets are going through the VPN.

  It's worth pointing out that split-tunnel configs *could* be a security
  hole. These systems (mine) are now a bridge between the
  big bad internet and Cal Poly. If my system get botnet status, that can
  be an issue for everyone on the campus network. There's
  probably other problems I'm blissfully unaware of too.

  Ultimately, use-at-your-own-risk.