cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1613
Views
0
Helpful
4
Replies

Split-dns configuration

erga
Level 1
Level 1

I need the VPN users to access one specific server externally

What I have done specify the internal domain to the splig-dns configuration.

I have not configured any access-list, as I need the users to resolve the server domain name to the external IP.

 

Any insight on this, is there a workaround

 

ASA 5525x

Anyconnect 4.4

 

Thanks in advance

4 Replies 4

In you group-policy disable dns-tunnel-all and specific domains which you
want to resolve using AnyConnect VA.

group-policy exmaple attributes
dns-server value 10.150.1.50
split-dns value domain1.com domain2.com
split-tunnel-all-dns disable

Thank you, but that is not working. I also set up split tunneling and anyconnect is dropping all the traffic that is not going through the tunnel.


Share your config

group-policy X.X.X.X attributes

dns-server value X.X.X.X

........

split-tunnel-policy tunnelspecified

split-tunnel-network-list value Internal

.......

split-dns value MYDOMAIN.COM

split-tunnel-all-dns disable

......