i am working on a setup wherein we have configured remote access vpn for our customers using a vpn concentrator 30xx series herein we are able to establish the ipsec tunnel and reach all the subnets on the inside of the concentrator however the dns route relayed or pushed from the concentrator to the client is not reachable ,we have a pix firewall behind the concentrator which has been configured to allow all the traffic coming in from the ipsec endpoints , when i check the routes on the endpoint device that is the vpn client machine i have a dns route with the tunnel gateway as the next hop except this specific route i have a default route on the client as well , the catch herein is that when i remove the specific dns route i am able to reach the dns server which was earlier unreachable , i am able to reach the dns server by means of the default route which has the same next hop as the specific route mentioned earlier.just need to clarify whether i have missed any configuration on the concentrator.
