cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
888
Views
0
Helpful
1
Replies

Router IOS ssl vpn Dns resolving

Spinu Viorel
Level 1
Level 1

Hello,

I have a router 1812. I have Vpn site-2-site configureand it's working good. I need to configure SSL Vpn for our mobile clients. The problem is that my url-list has 2 web links. The link with the name of the servers it doen't work (dns resolving problem), but the link with the IP it is working.

webvpn gateway gateway_1

hostname name1

ip address 172.31.100.200 port 443

http-redirect port 80

ssl trustpoint TP-self-signed-3183324561

inservice

!

webvpn install svc flash:/webvpn/svc.pkg

!       

webvpn context Default_context

ssl authenticate verify all

!

inservice

!

!

webvpn context name1

title-color #CCCC66

secondary-color white

text-color black

ssl authenticate verify all

!

url-list "WebServers"

   heading "Intranet Web"

   url-text "server IP" url-value "http://172.20.10.10"    ///// this is working

   url-text "server IP" url-value "http://webserver.internaldomain1.dom"     ///// this is NOT working

!

!

policy group policy_1

   url-list "WebServers"

   functions svc-enabled

   svc address-pool "VPNPOOL"

   svc default-domain "internaldomain2.dom"

   svc keep-client-installed

   svc msie-proxy option bypass-local

   svc dns-server primary 172.30.30.30

   svc wins-server primary 172.30.30.31

default-group-policy policy_1

aaa authentication list sdm_vpn_xauth_ml_1

gateway gateway_1 domain name1

inservice

My internal DNS which is responsible for resolving   webserver.internaldomain1.dom -> 172.20.10.10  is 172.30.30.30.
Can U please tell me what I'am missing?
Thank U!
Viorel

1 Reply 1

Jennifer Halim
Cisco Employee
Cisco Employee

You will need to configure your internal DNS server on the router itself so it can resolve that domain name.

To configure DNS server on the router:

ip name-server 172.30.30.30

Hope that helps.