Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Split tunnel VPN not resolving internal hostnames.

Good  morning all. I hope someone can point me in the right direction about  an issue I'm having with my VPN Server on my Cisco 2621xm.

I started by creating a VPN - everything worked great. I assigned  the DNS Servers, Domain name, WINS Server so when I connect I'm able to  resolve local hostnames on the network with no problem, however, I had no internet access... I then set up a split tunnel access  list. Since I've set that up, I'm now able to ping internet based  addresses (, but no longer able to resolve internal host names. I can ping the ip addresses, just name resolution no longer works.

Here is some basic info (hopefully you don't need the whole config).

Internal network address range:

VPN Network address range:

DNS Nameserver

domain acheron.local

crypto isakmp policy 1

encr 3des

authentication pre-share

group 2


crypto isakmp client configuration group ChrisVPN

key (HIDDEN)



domain acheron.local

pool SDM_POOL_1

acl home_away_split_tunnel


max-users 4



ip access-list extended home_away_split_tunnel

permit ip


ip local pool SDM_POOL_1

If anyone could please provide some input as to what I'm missing of what sort of changes can be made to solve this problem, I would be very greatful.

Thank you in advance,


Cisco Employee

Split tunnel VPN not resolving internal hostnames.

Can you try to add "split dns" command within your vpn group configuration.

New Member

Re: Split tunnel VPN not resolving internal hostnames.

I've enable split-dns, now everything works great, to a point.  Now it seems I lose the VPN connection shortly after its established.  I'll connect, everythig works splendidly.  I can ping both internal and external host names with no problem, but after about a minute and a half I'm no longer able to ping anything!  The VPN client still says its connected, and shortly after I lose the connection.  I don't understand why suddenly I'm no longer able to ping anything, then end up losing the connection after making a small change to the config...

Any help would be appreciated.

Thank you,

New Member

Split tunnel VPN not resolving internal hostnames.


Cisco Employee

Re: Split tunnel VPN not resolving internal hostnames.

Hmm, that's weird. How are you connected to the Internet? using wireless card? or wired to home DSL? or wireless to home DSL? or some other method?

CreatePlease login to create content