Not able to query VPN DNS

Question

Level 1

9 points

Not able to query VPN DNS

I have created a VPN connection to an Azure VPN Gateway using the documentation linked below:

https://docs.microsoft.com/en-us/azure/vpn-gateway/point-to-site-vpn-client-conf iguration-azure-cert

I am able to connect with no problems but I am not able to resolve anything using the VPN DNS server. When I open Terminal and run scutil --DNS, I see the VPN DNS server listed under the section titled "DNS condifgurations (for scoped queries) but when trying to browse to a resource thru the VPN, the browser cannot resolve the address. From within Terminal, if I run nslookup and then query the VPN DNS server specifically for a record, it returns the response.

I even tried adding the DNS server to the Advanced properties page but that had no effect.

How can I configure the OS to query the VPN DNS server when I am connected to the VPN?

Posted on Aug 14, 2018 10:29 AM

Reply

Answer 1

StangLuver Author

Level 1

9 points

Aug 14, 2018 11:43 AM in response to Marco Klobas

I read that before posting but it is kinda old and I have been unable to figure out how to effect what the solution is:

"You need to “Set Service Order” in Network preferences such that your VPN has highest priority. Then the resolver coming from the VPN will be preferred for your search domain “alison.local”."

When I try to set Service Order, it does not list the VPN connection I created as one of the options to order.

Reply

Answer 2

StangLuver Author

Level 1

9 points

Aug 14, 2018 12:30 PM in response to Marco Klobas

As per Azure documentation, VPN on Mac has to be IKEv2. And as you said...IKEv2 connections do not appear in the Service Order list. On my IKEv2 VPN, I do not see an option to Send all traffic over VPN connection. Not sure I would not want that anyway.

Reply

Answer 3

Aug 14, 2018 1:01 PM in response to StangLuver

You're right, IKEv2 connections don't have that option. I thought that sending all traffic over VPN would be a workaround for the DNS issue.

I found this on internet, it seems interesting: networking - Can't resolve host through VPN connection from Mac OS X - Server Fault

Reply

Answer 4

StangLuver Author

Level 1

9 points

Aug 14, 2018 3:43 PM in response to StangLuver

Found the article below but unable to make the suggestions work:

If you're unable to resolve or bind to domains that end in .local - Apple Support

Reply

Answer 5

Aug 18, 2018 1:14 PM in response to StangLuver

Did you solve your VPN/DNS issue? Unfortunately I ran out of ideas to solve your issue. :-/

Reply

Answer 6

Aug 14, 2018 12:15 PM in response to StangLuver

I've a L2TP VPN connection set in my Network Preferences. If I choose Set Service Order it appears listed among the Network Services.

It seems that IKEv2 connections aren't allowed to be part of the Service Order (maybe it's an Apple's bug).

What about choosing Send all traffic over VPN connection in the VPN advanced options?

Reply

Answer 7

StangLuver Author

Level 1

9 points

Aug 18, 2018 1:43 PM in response to Marco Klobas

Thanks for your help but no...issue persists. I believe it is a 2 prong issue. The fact that our private domain is .local rooted (Apple reserves this for the Mac OS) and that IKEv2 VPNs are not listed in the Service Order so you can't put them at the top of the order to be used first.

Reply

Answer 8

Aug 14, 2018 11:39 AM in response to StangLuver

I'm not a VPN expert, anyway here's a thread that maybe it's useful: Mac VPN connections don't resolve DNS properly

Reply

Not able to query VPN DNS

Similar questions