Link to home
Start Free TrialLog in
Avatar of WyleHou
WyleHou

asked on

VPN connections causing DNS issues for local domain.

We are having an issue where a user who sits on a 10.1.1.1 network makes a VPN connection to a 192.x.x.x net work and then it registers the 192.x.x.x in the local 10.1.1.1 DNS server causing issues.  How can I prevent the user from registering a 192.x.x.x address on our DNS server that should only have 10.x.x.x entries?  It there a way to prevent the VPN connection from registering with DNS?
Avatar of alexmclv
alexmclv
Flag of United States of America image

Is the user connecting from a Windows machine? If he/she is just connecting using Windows' built-in VPN client, you can modify the properties of the connection to prevent it from registering its DNS address by:

- Right-click the VPN connection and select Properties.
- Click the Networking tab.
- Select Internet Protocol (TCP/IP) and click the Properties button.
- Click the Advanced button.
- Click the DNS tab.
- UNCHECK the "Register this connection's addresses in DNS" checkbox.
- Click OK until you close out of all windows.
ASKER CERTIFIED SOLUTION
Avatar of Dave773
Dave773
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of WyleHou
WyleHou

ASKER

The users are using a checkpoint VPN client.
That's fine... the checkpoint client probably dynamically creates a "virtual" network adapter at the time of connection.
Do you use group policies in your network?
One option is to disable this setting in group policy... When your client PC gets his 10.x.x.x address from DHCP, the DHCP server should register that connection in DNS for the client and the PC setting becomes unnecessary.
The other option is to have the user connect to the VPN, then when the virtual adapter shows up, if its not already there, you can disable the setting at that time.
 
Avatar of WyleHou

ASKER

Yes, we do use group policies in our network.  Are you saying to disable the setting on all connections and then just let the DHCP server register the client with DNS?  If so do you know where in the GP setting is located?
I would just disable it in the vpn virtual adapter setting manually to start.
Avatar of WyleHou

ASKER

I just talked to the user and they were using the checkpoint but have now switched to a Juniper client and it does create a connection only when connected.  I had the user uncheck the setting when he was connected and then reconnect and the setting stayed.  I think this is going to fix the issue.
Nice. Let me know.