topic AnyConnect VPN - macOS - dynamic DNS registration in Network Security

AnyConnect VPN - macOS - dynamic DNS registration

cscherb — Tue, 08 Mar 2022 15:50:37 GMT

When running AnyConnect VPN on macOS, both IP addresses (VPN and physical) are registered in Windows DNS (RFC 2136) after establishing the VPN tunnel - doing the same with Windows clients just the IP address assigned to the VPN adapter is registered in DNS. Any idea how to prevent macOS from registering IP address of physical NIC in DNS when doing VPN ?

Re: AnyConnect VPN - macOS - dynamic DNS registration

giovanni.augusto — Tue, 08 Mar 2022 17:12:05 GMT

Hi,

Are you using a local pool on the ASA/FTD or are you directing the IP address least to a DHCP server?

in case if local pool can you show the relevant config to update the DNS entry?

Re: AnyConnect VPN - macOS - dynamic DNS registration

cscherb — Tue, 08 Mar 2022 19:06:45 GMT

I'm using a local pool on ASA.

I tried to use DHCP but this makes no difference to the client - the ASA is requesting the IPs from DHCP but hand out them to AnyConnect client the same way. Windows says in "ipconfig /all"in both cases "DHCP enabled: no".

Re: AnyConnect VPN - macOS - dynamic DNS registration

giovanni.augusto — Tue, 08 Mar 2022 20:38:18 GMT

Do you mind sharing your (sanitized) config?