Can't resolve domain names when Cisco VPN client is connected

Question

Level 1

0 points

Can't resolve domain names when Cisco VPN client is connected

I'm running the latest Cisco VPN client (4.9.01). I can make a VPN connection with no problem. When the VPN connection is made, I can no longer access web sites outside of my work's network. I can access sites on my work network (intranet site, web-based e-mail) and my mail client also works okay. However, unless I enter the IP address of a site into Safari, I can't connect the site. Seems domain name resolution stops working for all sites outside my work network. This is only a problem when I'm connecting from home, over my AEBS. When I swapped my wireless back the old Linksys Wireless G, problem went away. Also, when I open a Parallels session into XP and then initiate a VPN connection to my work, I can access all sites, both internal and external to work, but only on the XP session. I'm guessing there is a setting I need to change within the AEBS but so far, trial and error of changing various settings has not worked.

MacBook Pro Intel Core 2 Duo, Mac OS X (10.5.2)

Posted on Apr 27, 2008 5:55 AM

Reply

Answer 1

SimonPow

Level 1

0 points

May 2, 2008 7:11 AM in response to JohninTally

Hi

Either your office has done this by design as being able to access the office LAN and the internet as a whole ins a security issue, or the DNS servers on your LAN don't do forward lookups.

I doubt it's AEBS related.

S

Reply

Answer 2

JohninTally Author

Level 1

0 points

May 2, 2008 3:08 PM in response to SimonPow

The main reason I believe it's AEBS related is the problem didn't start until after I installed the AEBS. That was the only variable that changed, and it coincided with the loss of internet access when VPN was connected. Also, as a test, I disconnected the AEBS and hooked back up my old Linksys and viola, the problem went away. I've also talked to our networking guys and they do allow internet access when the VPN is connected.

Reply

Answer 3

JohninTally Author

Level 1

0 points

May 10, 2008 1:00 PM in response to JohninTally

Updated info: I realized today, after doing some more digging, that when the Cisco Windows client is installed, it basically creates a new network adapter. When I go to that network adapter, and check the properties for TCP/IP, there are entries under DNS for my county's DNS server. So when I am connected with Cisco VPN using Parallels, I can access the internet no problem because the vpn client has DNS entries. But when I connect using the Mac version of Cisco, on the same laptop, while in Mac OS X, I can't go to an internet site unless I manually enter the IP address. So, I'm still needing help here. Is it a setting my county needs to change on the Cisco switch? They had mentioned to me that when connected with VPN, all regular internet traffic is routed through one's ISP. But that doesn't seem to be the case here...

Reply