Welcome to ISAserver.org

Which DHCP options are supported by VPN clients ?

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> VPN >> Which DHCP options are supported by VPN clients ?

Page: [1]

Message

<< Older Topic Newer Topic >>

Which DHCP options are supported by VPN clients ? - 24.Nov.2004 7:57:00 PM

macrus

Posts: 58
Joined: 8.Feb.2002
From: Poland
Status: offline

Hello

Question as in the subject.
I've been digging into that for quite some time and I cannot make VPN clients to receive some additional DHCP options - it does get only DNS&WiNS addresses and dns domain name.
What I need to get is the WPAD entry to make my VPN clients get FWC configuration automatically (this works ok for LAN clients already)
I traced it down to examining the packets flying to/from DHCP server and I only found mentioned options in DHCP replies. Also Technet suggests that this list is limited to these few, but I'm not sure if they mean that.

So, am I doing something wrong that my VPN clients don't get additional options or it is "by design" ...?

regards

Post #: 1

Featured Links*

RE: Which DHCP options are supported by VPN clients ? - 25.Nov.2004 2:31:00 PM

macrus

Posts: 58
Joined: 8.Feb.2002
From: Poland
Status: offline

OK, I think I will answer myself.
Here is some info on that: http://support.microsoft.com/default.aspx?scid=kb;en-us;296591
(in short words it says that DHCP option 252 is not passed to VPN clients)

But if it is so, it seems impossible to achieve the following scenario working:

Assume you have several sites with ISA in every site. Every site is separate domain in the same AD. Assume you have roaming clients with laptops that travel between offices and you want them to be autoconfigured with local ISA wherever they go.
DNS wpad entry should not be used because it is based on user's DNS domain while we want autodiscovery to be based on the site the user is in. This can be achieved with DHCP option 252 and _does_ work. [Smile]

But now ...add a need to also autoconfigure these laptop users when they connect to the office with VPN. DHCP does not provide option 252 and you cannot use DNS wpad entry.
...and they're not autoconfigured [Frown]