register dns

[Diego Maciel Gomes]

Hi,

I need to know if is possible to register a machine into DNS through VPN..

I have a machine with the name note_10.

This machine receives an IP from DHCP server and register its on my DNS server, when I'm in my local network... Everything works fine...

When I connect in my VPN Client, I receive IP from my VPN POOL. This pool is different from my local network... Everything works fine...

I would like my machine could register its new IP of VPN POOL to my DNS server...

For example, when I ping note_10 its response with IP from VPN POOL

Is it possible?

I tried "ipconfig /registerdns" but nothing happened...

My VPN profile receives a full of allowed ports and hosts...

Any idea?

Thanks again

Diego

[Javier Portuguez]

Hi Diego,

There are 2 ways to have DDNS with VPN clients:

a. When a machine gets an IP from the ASA then it sends a registration request to the DNS server to add its hostname into DNS lsit with that IP address. The problem is that when the VPN connection is terminated, the client can't tell the DNS server that it no longer owns that IP.

b. Have the DHCP / DNS server perform the mapping and add it to DNS. When the DHCP server gets the Request from the client it adds the client's hostname and the IP that it returns in the offer into the DNS table. With this method, if the client disconnects from the VPN, the ASA should send a DHCPRELEASE message on behalf of the VPN client, to free up the address and the server should also remove the proper DNS entry as well.

Let me know.

Thanks.

Please rate this post if you find it helpful.

[Diego Maciel Gomes]

Hi Javier,

I guess option "a" is good...Lets see if I understood:

When I connect VPN, I receive the IP from VPN POOL normally..

ASA sends my hostname and my IP to DNS server... If I already have an input, its will be updated, right??

If I dont have, new input will be created...

It is what I really wish

When I disconnect from VPN, OK.. ASA doesnt need to do nothing...

When I connect again into my local network, I will update the input into DNS...

So, how can I configure this option "a" ?

[Javier Portuguez]

To constantly update the DNS record, the best way is to have the VPN clients get the IP address from the domain-controler.

Thanks.