6

We have a VPN set up that is a little troublesome. It doesnt assign a gateway IP address (a separate issue) but most annoyingly, I cant ping machines by their computer name, I have to use their IP address. Why?

1
  • Most likely it doesn't work simple because nobody ever set up some scheme to make it work. Jun 24 '13 at 10:55
2

A VPN setup that doesn't assign a default gateway address is OK - this just means that traffic not directed towards hosts that live on the VPN will instead traverse your normal Internet connection. Some work VPNs are set up this way - browser traffic, for example, won't go through the VPN if the default route isn't a VPN host. Some work VPNs prefer to set it up where all your Internet traffic is routed through the VPN. It can be done either way.

Many LANs have a local DNS or WINS server to resolve names for local machines. For example, at my work, I can type ping ws1000 to ping the computer named ws1000. This is because on the LAN, my DNS is pointed to our LAN's DNS server (which is also our AD server).

On the Internet at large this won't work because only the work LAN's DNS server is setup to return a specific IP for the name ws1000. Once I hop on my work's VPN, which "takes over" the Internet connection as in the second case above, ping ws1000 works fine.

So you need to first get your DNS servers visible on the VPN. Then, if your LAN's DNS servers are accessible via the VPN, you need to configure your VPN software to tell Windows to set the VPN connection's DNS servers to those. Now, this does mean all DNS queries will be going over the VPN, but it's what you need to do. Of course your LAN's DNS servers need to forward non-local queries to an external DNS server such as OpenDNS, Google, or those of your LAN's ISP.

2
  • So DNS is responsible not only for resolving domain names, but local (NetBIOS) machine names as well?
    – Jimbo
    Jun 24 '13 at 12:02
  • A Microsoft DNS server, such as the one that may be found on a domain controller within a corporate network, can if I'm not mistaken also act as a WINS server. A standard DNS server like unix bind only handles DNS requests but I think Microsoft's stuff handles NetBIOS too.
    – LawrenceC
    Jun 24 '13 at 17:50
0

because you need to set up Name Resolution (DNS) to do that... i doubt that any VPN has that functionality built-in...

You'll need to play with your /etc/hosts/ files (C:\WINDOWS\system32\drivers\etc\hosts on Windows) or to install and configure Bind on your VPN server.

-1

If you need to get involved in the VPN user sessions, set the correspondence between the user's login name and IP address of the VPN client.

VPN Active Directory properties

Use the internal DHCP + WINS + DNS. Not VPN Server DHCP range.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.