VPN ipconfig /all behavior

[sktanvisa]

Upon successfully connecting to Concentrator 3000, I realised, on the Ethernet adapter, that my ISP DNS entries were replaced and new WINS entries were added according to my DHCP server options 006 (DNS Servers) and 044 (WINS/NBNS Servers) respectively.

However, DHCP server option 015 (DNS Domain Name) did not appear in Ethernet adapter's Connection-specific DNS Suffix.

Is this by design? I am using VPN Client v3.6.3.

[gfullage]

When using a DHCP server with a VPN3000, the only thing that is assigned to the client is the IP address. The concentrator is NOT assigning the DNS and WINS servers based on the information it received from the DHCP server as you think. It IS assigning them from entries you have added under the VPN3000 group, under the Config - User Management - Groups - Modify Group section, under the General tab.

If you go under the Client Config tab here also, near the bottom is where you enter the default domain name. This will then be assigned to the VPN client.

The concentrator ignores everything it gets from the DHCP server EXCEPT for the IP address.

[sktanvisa]

We entered our preferred default domain name in the section you mentioned above.

When I issued "ipconfig /all", the default domain name was added to the top of the "DNS Suffix Search List" instead of to the adapter's "Connection-specific DNS Suffix".

What must we do to ensure that the default domain name goes to the "Connection-specific DNS Suffix" of a Windows 2000 Pro client?

You mentioned IP address is passed over. Why isn't this visible in "ipconfig /all"? Does VPN Client v4 display the IP address, gateway etc in "ipconfig /all"?

[gfullage]

The v3 client uses a SHIM adapter which is not visible to the underlying OS, so you won't see anything under "ipconfig /all" as far as the IP address is concerned.

The v4 client uses a logical adapter and you can see all its details in the "ipconfig /all" output. I would strongly suggest you use the latest 4.0 client, the 3.6 client is getting a bit long in the tooth nowadays (a bit old, if you're not sure what that means).

Check out the description on DNS here, it's quite useful:

http://www.cisco.com/univercd/cc/td/doc/product/vpn/client/rel4_0/admin_gd/vcach2.htm#1191125