cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1670
Views
0
Helpful
2
Replies

ASA Group Policy Domain

wgmcmahon
Level 1
Level 1

I've recently taken over a network and whenever I VPN from home I'm noticing that my network domain isn't matching what it is when I'm at work.  For example when I'm at work my domain is:

wgmcmahongroup.com

and when I'm on VPN it's:

wgmcmahon.com

I've done some digging (i'm not very familiar with the ASA yet), but found that the  group-policy remotevpn attributes specifies:

group-policy remotevpn attributes

default-domain value Wgmcmahon.com

Should I change this to wgmcmahongroup.com?

The reason I ask is because when I do a nslookup over VPN it's trying to resolve DNS names to wgmcmahon.com (ie. pc1.wgmcmahon.com instead of pc1.wgmcmahongroup.com). 

Firstly, is the default-domain value what's causing the issue and

Secondly, would there be any reason why the previous administrator used wgmcmahon.com instead of wgmcmahongroup.com?

1 Accepted Solution

Accepted Solutions

Julio Carvajal
VIP Alumni
VIP Alumni

Hello William,

1- Yes, that is why you are getting that domain-name. That policy is getting to your VPN client.

2- I have no idea, the administrator is the one who should know why he wants you to use that particular domain-name.

If you want to change it you already know how to do it

Any questions let us know.

We will be more than glad to help.

Regards,

Julio

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC

View solution in original post

2 Replies 2

Julio Carvajal
VIP Alumni
VIP Alumni

Hello William,

1- Yes, that is why you are getting that domain-name. That policy is getting to your VPN client.

2- I have no idea, the administrator is the one who should know why he wants you to use that particular domain-name.

If you want to change it you already know how to do it

Any questions let us know.

We will be more than glad to help.

Regards,

Julio

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC

Wonderful.  Thanks for the response.  I'll try it out during down time.