topic Re: VPN Anyconnect DNS issue in DevNet Sandbox

VPN Anyconnect DNS issue

moises.nisenbaum2 — Sun, 16 Jul 2023 18:50:46 GMT

Connecting to CML2 SandBox using Cisco AnyConnect changes my Windows DNS so I cannot navigate in Internet in the same time I use the CML2 Sandbox.

Researching a little bit abou this issue I found out that it probably is a server side problem.

Would you please help?

Thank you!

Re: VPN Anyconnect DNS issue

MHM Cisco World — Sun, 16 Jul 2023 18:54:55 GMT

You use asa' if yes config external dns server. And check

Re: VPN Anyconnect DNS issue

Flavio Miranda — Sun, 16 Jul 2023 18:55:53 GMT

Hi @moises.nisenbaum2

Did you try to add a second dns on your Windows machine network adapter?

Re: VPN Anyconnect DNS issue

moises.nisenbaum2 — Sun, 16 Jul 2023 19:19:46 GMT

Unfortunately I do not use ASA at home. It is my ISP router.

Re: VPN Anyconnect DNS issue

moises.nisenbaum2 — Sun, 16 Jul 2023 19:20:09 GMT

Yes. It does not work.

Re: VPN Anyconnect DNS issue

MHM Cisco World — Sun, 16 Jul 2023 19:24:10 GMT

Even so ISP router' add external DNS to anyconnect profile.

Re: VPN Anyconnect DNS issue

Flavio Miranda — Sun, 16 Jul 2023 19:36:27 GMT

Does the DNS is the only thing they are chaning on your machine or they are adding a default route also?

If they are, you may need to add another default route sending to you internet gateway. The behavior you describes sounds like they are also changing your routing also.

Re: VPN Anyconnect DNS issue

moises.nisenbaum2 — Sun, 16 Jul 2023 19:55:42 GMT

Ping to 8.8.8.8 works. So I didnt check for wrong routes.
nslookup changing the DNS server works.

Re: VPN Anyconnect DNS issue

moises.nisenbaum2 — Sun, 16 Jul 2023 19:58:03 GMT

It was working fine for years. Some day this issue started to happen... I didnt change any config...

Re: VPN Anyconnect DNS issue

MHM Cisco World — Sun, 16 Jul 2023 20:01:57 GMT

Dont use edge but use google browser.

Re: VPN Anyconnect DNS issue

bigevilbeard — Mon, 17 Jul 2023 07:05:06 GMT

Check this thread here -- https://community.cisco.com/t5/devnet-sandbox/internet-on-my-laptop-stops-when-on-vpn/m-p/4055662#M4568

Re: VPN Anyconnect DNS issue

Johnandrew — Mon, 17 Jul 2023 08:42:40 GMT

Split tunneling is a feature of Cisco AnyConnect that allows you to specify which traffic should be routed through the VPN tunnel and which traffic should be routed through your regular internet connection. If you disable split tunneling, all of your traffic will be routed through the VPN tunnel, including DNS traffic. This will ensure that your DNS queries are always resolved by the DNS servers of the CML2 Sandbox.