Spli-DNS

[tednie]

Has anyone done split-dns with an IOS router acting as an easy vpn client back to a headend vpn3k? I think I have the syntax down but I'm unclear whether the dns query from the clients are transparently intercepted and responded-to by the router or does the client have to be configured with a dns entry addressed to query the router directly. Any help would be appreciated. Thanks

[thomas.chen]

Support for Split DNS?The ability to direct DNS packets in clear text over the Internet to domains served through an external DNS (serving your ISP) or through an IPSec tunnel to domains served by the corporate DNS. The VPN Server supplies a list of domains to the VPN Client for tunneling packets to destinations in the private network. For example, a query for a packet destined for corporate.com would go through the tunnel to the DNS that serves the private network, while a query for a packet destined for myfavoritesearch.com would be handled by the ISP's DNS. This feature is configured on the VPN Server (VPN Concentrator) and enabled on the VPN Client by default.

Try this link:>

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123tcr/123tsr/sec_s2gt.htm#wp1186267

http://www.cisco.com/en/US/products/hw/vpndevc/ps2284/products_configuration_example09186a008015f324.shtml