if the vpn 3002 has dns enabled
Configuration | System | Servers | DNS
and the 3002 is learning dns from its dhcp source (a cable modem isp, or
other way) the 3002 passes this info to the clients when its gives them
IP addresses from its dhcp server configured in
Configuration | System | IP Routing | DHCP
the dns etc, configured in groups on the 3030 is not used unless your passing this thru to the induvidual clients, which is a bad scenario...