DNS in VPNs

[R. Paulson]

Hello Guys,
I have a dilema here, I want to run two ISP connections
one for my VPN domain traffic and one for my Internal
LAN / internet traffic.

Here are the details on what I have set up currently. I
have two ISP connections DSL and CABLE, CABLE is for my
VPN, DSL for internet access, I have two domains outside
my LAN coming in through VPN all on W2K DCs (native mode)
w/ DNS . I have the root domain here w/ DNS, it is only
used for VPN, not for internal users, though we want to
change this. Currently my internal users are on a NT4
domain, which I want eliminated and bring them on the W2k
DC, my problem. . . If I join them to the w2k domain
they will be going out through the DNS server that is
linked up with CABLE, I do not want this I want them to
go out through DSL, so do I have to add another DC and
DNS server? or is there some way to have internal users
go out through DSL for Internet resolutions, but still go
out through CABLE for VPN resolutions?

Thanks.

 

[Kevin D. Goodknecht [MVP]]

In

Hello Guys,
I have a dilema here, I want to run two ISP connections
one for my VPN domain traffic and one for my Internal
LAN / internet traffic.

Here are the details on what I have set up currently. I
have two ISP connections DSL and CABLE, CABLE is for my
VPN, DSL for internet access, I have two domains outside
my LAN coming in through VPN all on W2K DCs (native mode)
w/ DNS . I have the root domain here w/ DNS, it is only
used for VPN, not for internal users, though we want to
change this. Currently my internal users are on a NT4
domain, which I want eliminated and bring them on the W2k
DC, my problem. . . If I join them to the w2k domain
they will be going out through the DNS server that is
linked up with CABLE, I do not want this I want them to
go out through DSL, so do I have to add another DC and
DNS server? or is there some way to have internal users
go out through DSL for Internet resolutions, but still go
out through CABLE for VPN resolutions?

Thanks.

The client's gateway decides which connection is used for outgoing
connections, _not_ the DNS server they use. DNS only resolves names to IP
addresses. So far as that goes if the Machine can ping the DSL gateway even
it can use DSL for outgoing connections. If the Cable connection is not used
as a gateway no outgoing connections will be made through the cable, the
only packets that will go out through the cable are for answers to incoming
connections through the cable.