Solved

DNS problem vith 3G and VPN

Posted on 2010-09-17
5
652 Views
Last Modified: 2013-11-05
HI

I have a strange problem:
First som facts our company have a Checkpoint UTM-1 firewall R70.40.  There is also a site to site VPN to another site where there is a server called vgma03.domain.se. there is two domians in our site domain.com and domain.se. When users connect true a ADSL conenction and then use checkpoint SSL VPN or checkpoint remote agent (office mode) everything works perfekt. BUT when they use a 3G ´connection they cant get the right IP adress for the server in the remote site,. if you ping vgma03.domain.se they the external ip adress of it. If we ping its internal IPadress it answers correct. any other server in the domain.se are answer correct. We haveconfigured the VPN client to route al traffic true the firewall and still it use the 3G connections DNS for the remote site server.  I cant understand how to make the 3G connection to always use our internal DNS server when its connected  with VPN connections and external DNS when connected to internet only. The server in the remote site is an Exchange 2003. Thanks
0
Comment
Question by:EjendalsAB
  • 3
  • 2
5 Comments
 
LVL 92

Expert Comment

by:John Hurst
ID: 33708735
The 3G connnection will often use a double NAT type of connection and this frequently does not play well with VPN. What VPN client do your users have on their computers? .... Thinkpads_User
0
 

Author Comment

by:EjendalsAB
ID: 33713509
Hi

what dó you mean what VPN client they use mate? I wrote that in my question or do you mean excatly what version of the client?

BR

johan
0
 

Author Comment

by:EjendalsAB
ID: 33713517
I would like to add that it works with same 3g dongel in a machine that uses Windows Xp.
0
 
LVL 92

Accepted Solution

by:
John Hurst earned 500 total points
ID: 33713556
Sorry, I skipped past the checkpoint client. However my point stands: Some 3G cards have trouble with VPN because of the strange NAT arrangement. The characteristics of 3G cards are also dependent on the OS they are installed in (at least that is my experience with them). ... Thinkpads_User
0
 
LVL 92

Expert Comment

by:John Hurst
ID: 33937164
Thank you. I am sorry I could not be of more help. Consider if you wish the NCP Secure Entry clent (www.ncp-e.com)
... Thinkpads_User
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
ACL per VPN User 12 102
Printer locally over VPN 2 65
Sophos UTM Endpoint VPN 2 49
Single host traffic only allowed through ASA--strange. 4 42
For a while, I have wanted to connect my HTC Incredible to my corporate network to take advantage of the phone's powerful capabilities. I searched online and came up with varied answers from "it won't work" to super complicated statements that I did…
OpenVPN is a great open source VPN server that is capable of providing quick and easy VPN access to your network on the cheap.  By default the software is configured to allow open access to your network.  But what if you want to restrict users to on…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…

911 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

22 Experts available now in Live!

Get 1:1 Help Now