I'm using the Sonic client software to reach a TZ170 and it's set to use DHCP. The LAN DHCP server is also a DNS server. My VPN adapter gets a LAN IP, but I can't reach network resources by name -- only by IP. Is it possible for DNS to work through the VPN too?
Yes.
Do you have the DNS server defined in the scope on the DHCP? If so, it should pass that DNS info on to the client automatically.
The DNS server is listed in scope options. In fact, at the VPN client I just tried IPCONFIG/ALL and the VPN adapter has the DNS server address, so it appears that DHCP did assign it. Here's the IPCONFIG/ALL output for the VPN adapter:
Windows 2000 IP Configuration
Host Name . . . . . . . . . . . . : xxxxxxxxx Primary DNS Suffix . . . . . . . : Node Type . . . . . . . . . . . . : Hybrid IP Routing Enabled. . . . . . . . : No WINS Proxy Enabled. . . . . . . . : No
Ethernet adapter Local Area Connection 2:
Connection-specific DNS Suffix . : Description . . . . . . . . . . . : SonicWALL VPN Adapter Physical Address. . . . . . . . . : xx-xx-xx-xx-xx-xx DHCP Enabled. . . . . . . . . . . : Yes Autoconfiguration Enabled . . . . : No IP Address. . . . . . . . . . . . : 192.168.117.77 Subnet Mask . . . . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . . . . : DHCP Server . . . . . . . . . . . : 192.168.117.2 DNS Servers . . . . . . . . . . . : 192.168.117.2 Primary WINS Server . . . . . . . : 192.168.117.2 Lease Obtained. . . . . . . . . . : Wednesday, March 16, 2005 10:33:37 PM Lease Expires . . . . . . . . . . : Thursday, March 24, 2005 10:33:37 PM
Yes, it's possible. I've got some boxes out there running a similar setup. IMHO your problem is not DNS, but NETBIOS/WINS. Without appending your domain suffix automatically the Windows-host uses the NETBIOS-name, which is - by design - impossible over an IPsec-VPN. Sonicwall has an option to run NETBIOS over VPN, just forwarding the necessary broadcasts.
Perhaps you want to try manually adding the suffix? (DNS-tab in advanced TCP/IP-Settings). Afterwards everything should work like a charm :-)
\\cd
You're right. I didn't think of this until after my last message. Probably should have though.
Cabling-Design.com Forums website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.