Can't access DFS via Cisco VPN software

Hello IT pros.

I have the following situation.
We have a Cisco ASA 5515-X in our building, we have two different domains inside as well, 1st domain is called school1.lan and the 2nd is network2.lan, for schoold1.lan we have 10.1.10/23 and for network2.lan we have 172.16.1.0/24, when I connect from home using Cisco VPN software I connect to 172.16.1.0/24 I can access all the shares, except the DFS share.. I get the right IP address, but one thing that has caught my attention is that the primary dns suffix I get is school1.lan

Any ideas.
Katrach0System AdminAsked:
Who is Participating?
 
Katrach0Connect With a Mentor System AdminAuthor Commented:
Ended up calling Cisco, they told me this.

Here is a summary of our call today:
 
1.      You informed that you were pushing a domain name and a couple of split-dns entries to the vpn clients.

2.      The vpn clients were able to resolve the hosts in one domain but weren’t able to resolve the hosts in the second domain.

3.      We corrected the IP address of the secondary dns server and we were now able to resolve the hosts in the second domain as well
4.      However, we were still not able to access the DFS file shares in the second domain.
5.      When we try to access the DFS file share in the second domain, it resolves but an authentication prompt comes up.
6.      This doesnt happen if we are trying to connect to the file shares from a host that is a part of the same domain.
7.      It appears to be a permission issue on the DFS file shares where it asks for authentication whenever we try to access it from a machine that is not a part of the same domain.
8.      However, the fact that we are able to reach that server using hostname confirms that the dns server is resolving hostnames successfully now.

I also want to point out that Cisco firewalls can do split dns, but this didn't fix the issue, what fixed the issue was to put the domain name where the DFS share was located and put the DNS IP's for that domain, only then I was able to browse through the DFS shares, We are using a ASA515X. Cisco guys are good at newtworking, but when it comes to Microsoft thechnologies, they're lost, it was not share permissions the problem, so.. Hope this helps anyone out there.
0
 
mat1458Commented:
Did you try to connect to the DFS by using the IP address instead of the name? If this works we can continue to sort out DNS problems, otherwise IP routing or firewall rules might be the focus.
0
 
Katrach0System AdminAuthor Commented:
Right, since I cannot connect using \\mydomain\mydfs when connected via vpn I tried the IP address of one of the servers \\w.x.y.z\mydfs I still can't open it.
0
 
Katrach0System AdminAuthor Commented:
I got my problem solved.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.