Cisco IPSec DNS problem

Question

Zveky Author

Level 1

0 points

Cisco IPSec DNS problem

Hi,

MacBook Air

OS X 10.6.7

I created VPN connection.

Interface : VPN

VPN Type : Cisco IPSec

I'm connecting without problem.

Problem is that DNS query doesn't work for internal hosts.

I can't access computers via VPN connection by FQDN or hostnames only via computer IP.

I checked VPN connection and DNS servers are added but it look like that mac don't use it.

Is this bug or I'm doing something wrong?

Is there some update or fix to solve this problem?

Regards,

Darko Bazulj

MacBook Air, Mac OS X (10.6.7)

Posted on May 21, 2011 9:11 AM

Reply

Answer 1

May 21, 2011 10:27 AM in response to Zveky

It would be helpful to get the verion of the Cisco VPN software. That said, read this it may help. It describes the DNS challenge with split tunneling and recommends the fix:

"To avoid this problem, remove the ISP-assigned DNS server from the range of the Split Tunneling Network List, or do not configure split DNS. "

Full release notes found here.

Release Notes for VPN Client for Mac OS X, Release 4.9

DNS Server on Private Network with Split DNS Causes Problems

http://www.cisco.com/en/US/docs/security/vpn_client/cisco_vpn_client/vpn_client4 9/release/notes/49client.html#wp1371781

Reply

Answer 2

Zveky Author

Level 1

0 points

May 21, 2011 10:42 AM in response to enough-with-the-marketing

Hi,

Thnks for answer but I don't use Cisco VPN utility.

I created VPN connection with integrated OS X option which can be found under "System Preferences / Network / Add ➕ / VPN / Cisco IPSec"

Is there some fix for this type of connection or I'm doing something wrong?

Regards,

Darko Bazulj

Reply

Answer 3

May 21, 2011 12:25 PM in response to Zveky

Sorry for my misunderstanding.

It appears the only solution is to manually add the DNS entries for the machines you desire to connect to via VPN to your local hosts file.

Check out this post.

https://discussions.apple.com/thread/2163308?start=0&tstart=0

Here's how to edit the hosts file.

http://www.seanlabrie.com/2010/how-to-edit-the-hosts-file-on-a-mac/

If you edit your hosts file locally be sure to back it up before editing in case you fat finger something :-).

Reply

Answer 4

Zveky Author

Level 1

0 points

May 22, 2011 8:39 AM in response to enough-with-the-marketing

Hi,

thanks for answer.

but that is not very good workaround especially I need access to multiple machines.

So I added VPN DNS servers on my WiFi adapter in front of local DNS server.

And now everrything is working as expected.

But this is then a bug!

Does Apple support monitor this comunity because now I see that many people reported this problem but I didn't find any response from support with their suported workaround or fix.

I'm new in Mac world 🙂 (week 1)

How to report problem and expect that Apple support will answer?

I ask this because I reported some problems about windows on news groups and Microsoft responded with answer.

Also does Apple have something as Technet or MSDN?

http://technet.microsoft.com

http://msdn.microsoft.com

Reply