Welcome to ISAserver.org

VPN DNS issue with Domain

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Firewall] >> VPN >> VPN DNS issue with Domain

Page: [1]

Message

<< Older Topic Newer Topic >>

VPN DNS issue with Domain - 20.Aug.2008 5:48:56 PM

patrickf3

Posts: 1
Joined: 20.Aug.2008
Status: offline

Okay I have my VPN setup nearly perfectly. When I login (on a computer that is not domain authenticated) I can do everything I want. DNS does lookups correctly such as DSM2 = 10.10.8.10...ect. However when I login to a computer that is on our domain and use the VPN when I try to resolve DSM1 it points to our outside address and I cannot use any DNS related stuff on the VPN. I can however connect via ip address (which is very un-usefull while using sharepoint).

Here are some results to my nslookup queries (from a coffee shop, VPNed to our network on the domain laptop - asdf.com is arbritary)

>nslookup
Address: 192.168.0.200

>dsm2
Server: dslmodem.domain.actdsltmp
Address: 192.168.0.200

Non-authorative answer:
Name: dsm2.asdf.com
Address: 65.167.***.155

>server 10.10.8.2
DNS request timed out timeout was 2 seconds
Default Server: 10.10.8.2
Address: 10.10.8.2

>dsm2
Server: [10.10.8.2]
Address: 10.10.8.2

Name: dsm2.asdf.com
Address: 10.10.8.10

>

Therefore when I FORCE the DNS to look at my internal DNS it works, however when it's setup as default it tries to send DSM1 out the DNS of the coffee shop and it points to my outside address. Why is it not going out of my DNS of the PPP connection for VPN stuff instead?

Post #: 1

Featured Links*

RE: VPN DNS issue with Domain - 18.Nov.2008 12:15:59 AM

justinmcdonald

Posts: 1
Joined: 18.Nov.2008
Status: offline

I've been struggling with the same problem for a few days. I found this fix, worked for me first time:

http://support.microsoft.com/default.aspx?scid=kb;en-us;311218

(in reply to patrickf3)

Post #: 2

RE: VPN DNS issue with Domain - 18.Nov.2008 6:16:00 AM

Jason Jones

Posts: 2121
Joined: 30.Jul.2002
From: United Kingdom
Status: offline

The best approach is to use CMAK for the VPN client configuration and then add the RAS adapter changes as a pre-connect task.

http://www.isaserver.org/tutorials/work-around-VPN-clients-split-DNS.html

Cheers

JJ

< Message edited by Jason Jones -- 18.Nov.2008 6:22:07 AM >

_____________________________

Jason Jones (MVP)

Silversands Limited http://www.silversands.co.uk
My Blog: http://blog.msfirewall.org.uk/

Get our NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to justinmcdonald)

Post #: 3