Quote:
Originally Posted by
OverK1LL 
Wow, you explained that perfectly. I had one of those "ah-ha!" moments reading your explanation and everything clicked.
The only thing I don't understand is why the connection-specific DNS suffix does not automatically configure - on any machine.
I can't resolve hostnames on any remote computer, on any remote network (unless setting the suffix).
What DHCP server are you using (both for localnet and for the network the VPN server is on)?
Additionally, what are you using for VPN (i.e RAS on Windows, etc).
While DHCP is not the issue, adding the search names option to DHCP (both networks) will give you the DNS suffix you need - but need to know what systems you are using first.
I am using, for example, Routing and Remote Access on a Server 2008 R2 box along with Microsoft DHCP and DNS. I have configured option 15 on the DHCP server that serves the RAS (VPN) ports - and it works without a problem:
Code:
PPP adapter VPN Connection:
Connection-specific DNS Suffix . : home.local
Description . . . . . . . . . . . : VPN Connection
Physical Address. . . . . . . . . :
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv4 Address. . . . . . . . . . . : 10.0.0.33(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.255
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : 10.0.0.1
NetBIOS over Tcpip. . . . . . . . : Enabled
Unfortunately, resolving hosts on the other network still isn't that simple.
This is a common issue:
Quote:
VPN clients will not be able to resolve DNS host names on the internal network if they are not assigned a DNS server address by the VPN server. In most cases, the VPN client already has a DNS server address assigned to it. However, that DNS server address does not resolve names on the corporate network because that DNS server is intended to resolve names on the network the VPN client computer is attached to before connecting to the VPN server, or to resolve only Internet host names.
The solution to this problem is to configure the VPN server to assign a DNS server address to the VPN clients.
http://www.isaserver.org/img/upl/vpnkitbeta2/dnsvpn.htm
You can follow the guide there or alternatively you can configure your
local DHCP server to hand out the DNS server address that lives on the VPN. Depending on your DNS server on your local network, you could also connect that machine to the VPN and set up a forwarder so that hosts on the VPN side can get resolved (the DNS server will forward requests it can't handle to the server you configured).
Edited by tompsonn - 11/6/12 at 7:41pm