cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
342
Views
0
Helpful
2
Replies

Maintaining Internal DNS After Connecting to Client VPN

jgorman1977
Level 1
Level 1

We connect to client VPN's all day and I wanted to know if there is a way to still use our Internal LAN DNS while connected. For instance, when I connect to client A's VPN, our internal mail server and dns resolves to the public IP's.

Thanks

1 Accepted Solution

Accepted Solutions

Jennifer Halim
Cisco Employee
Cisco Employee

You can configure split-dns feature, but that can only be configured at your client's vpn device because you are only connecting with vpn client and normally vpn client policies get pushed from the vpn headend device.

Here is the split-dns command if your client happens to run ASA firewall, and they allow you to configure it:

http://www.cisco.com/en/US/docs/security/asa/asa80/command/reference/s8.html#wp1404571

View solution in original post

2 Replies 2

Jennifer Halim
Cisco Employee
Cisco Employee

You can configure split-dns feature, but that can only be configured at your client's vpn device because you are only connecting with vpn client and normally vpn client policies get pushed from the vpn headend device.

Here is the split-dns command if your client happens to run ASA firewall, and they allow you to configure it:

http://www.cisco.com/en/US/docs/security/asa/asa80/command/reference/s8.html#wp1404571

Perfect. I administer the clients ASA, so this won't be an issue. Thank you.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: