cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
315
Views
0
Helpful
3
Replies

Same URL with two IP resolution issue using anyconnect mgmt VPN Tunnel

MSJ1
Level 1
Level 1

I configure an AnyConnect Mgmt VPN Tunnel. One of the issue I have is it is resolving to the Internal IP for a FQDN which has both Public and Internal IP Interface. Like below 

test.domain.com  -- Internal - 192.168.10.10 , Public IP - 202.136.25.10

Customer need Public IP of it to resolve when it is connecting to Mgmt VPN Tunnel. 

Mgmt VPN Split Tunnel Option is as below. In the ACL if I remove or add DNS IP as part of ACL does not make a difference. 

MSJ1_0-1725293691503.png

MSJ1_1-1725293841337.png

I also tried custom attribute to exclude this type of URL but does not seem like Custom Attribute supports mgmt VPN tunnel. Or I need to see any options at Mgmt XML FIle for mgmt VPN tunnel. ?

Advise if you have any idea how to fix it.

 

3 Replies 3

The S

DNS connect to IN or OUT ?

MHM

Need to connect to the Public Interface of the URL 

If DNs inside and Outside host try use it to resolve IP you can use static NAT with dns'this NAT will inspect dns reply and change the private IP to public IP'

This will make you need only set private IP in dns entry.

MHM