cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
147
Views
5
Helpful
1
Replies
Beginner

DNS/Split Tunnel

Hello,

 

Let's say we split the internet traffic from the rest in ANY Connect, and let's say we don't want to use our ASA's network DNS Server to resolve internet domains but we wanna use it to resolve internal domain names, so how should we achieve that? What dns server should we put for ANY connect client in this way(ofc we still want the client to have access to the internet)? maybe a backup dns?

 

Thx

 

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted
VIP Mentor

Re: DNS/Split Tunnel

You typically have a config like this:

group-policy VPN-TEST attributes
 dns-server value 10.10.10.53
 split-tunnel-policy tunnelspecified
 split-tunnel-network-list value VPN-INTERN
 split-dns value example.intern

The split-tunnel only sends internal traffic through the VPN. And the split-dns-config only resolves all "example.intern" queries through 10.10.10.53 and all the rest through the configured DNS on the client.

 

1 REPLY 1
Highlighted
VIP Mentor

Re: DNS/Split Tunnel

You typically have a config like this:

group-policy VPN-TEST attributes
 dns-server value 10.10.10.53
 split-tunnel-policy tunnelspecified
 split-tunnel-network-list value VPN-INTERN
 split-dns value example.intern

The split-tunnel only sends internal traffic through the VPN. And the split-dns-config only resolves all "example.intern" queries through 10.10.10.53 and all the rest through the configured DNS on the client.