VPN Client uses the wrong DNS

[gbruna]

Hello,

I have a strange  problem with users connecting to our company via Cisco VPN Client software.

The VPN gateway is a Pix 515E running v 7.2-4

The number of concurrent users is around 100.

The problem I face is this:

some users connect correctly to the vpn but then they do not use our internal DNS but they still use the ISP DNS server hence they cannot resolve any name within our organization..

This happens only on some PCs and I cannot find the reason.

Does anybody have an idea on where the problem is?

thanks in advance and regards

Giovanni

[apothula]

Hi Giovanni,

Are you using split dns ??

Cheers,

Nash.

[gbruna]

no, I'm not using split-dns. This is the setting I have:

group-policy marelli attributes

wins-server value 139.128.15.72

dns-server value 139.128.15.72 139.128.15.71

vpn-tunnel-protocol IPSec

split-tunnel-policy tunnelspecified

split-tunnel-network-list value marelli_splitTunnelAcl

default-domain value marelli.it

I tried also with split-dns but with no success....

Thanks

Giovanni

[apothula]

Hi Giovanni,

How did you configure split dns ?

Could provide us that chunk of the configuration ?

Cheers,

Nash.

[gbruna]

Hi,

I setup a test group using split-dns and these are the settings:

group-policy test internal

group-policy test attributes

wins-server value 139.128.15.71

dns-server value 139.128.15.71

vpn-tunnel-protocol IPSec

split-tunnel-policy tunnelspecified

split-tunnel-network-list value marelli_splitTunnelAcl

split-dns value local it com de fr net uk gov

But from my Pc which works fine with VPN Client with no split-dns I have this problem:

nslookup for every domain included in the split-dns is resolved correctly while if the domain is not included in the split-dns value is NON resolved.

See the example:

VPN Client using the split-dns configured as above:

C:\Documents and Settings\gb>nslookup

Default Server:  itven1adc1.mmemea.marelliad.net

Address:  139.128.15.71

> www.google.com

Server:  itven1adc1.mmemea.marelliad.net

Address:  139.128.15.71

DNS request timed out.

    timeout was 2 seconds.

Non-authoritative answer:

Name:    www.l.google.com

Addresses:  209.85.149.106, 209.85.149.147, 209.85.149.99, 209.85.149.103

          209.85.149.104, 209.85.149.105

Aliases:  www.google.com

> www.google.es            ****  lookup for a domain (es) which is not included in the spli-dns  ****

Server:  itven1adc1.mmemea.marelliad.net

Address:  139.128.15.71

DNS request timed out.

    timeout was 2 seconds.

DNS request timed out.

    timeout was 2 seconds.

*** Request to itven1adc1.mmemea.marelliad.net timed-out

Thanks and Regards

Giovanni