Split DNS on the Cisco VPN Unified client

[titom]

Hi,

has anybody heard about something like split-DNS on a VPN concentrator/VPN client ?

Something like this : depending on the domain-name, the client machine requests the internal DNS server through the tunnel or the public DNS server of its ISP for example.

I've heard this was possible on Checkpoint VPN-1/SecuRemote.

Thanks in advance.

Regards,

Thomas

[smalkeric]

Can’t you just configure both DNS servers to be sent to the client? Our internal DNS looks up external addresses when it can’t resolve it so it might just be something you can configure on your DNS server.

[murriware]

Split-tunnel is what you get with PIX and VPN concentrator: an access-list which defines what are the reachable internal addressess. What is out is routed though ISP and (if the case) it is not encrypted.

Bye

Maurizio