DNS and RRAS

[Haggis]

I have a weird problem. My VPN clients can't resolve DNS
names through RRAS. Central LAN has no problems. IP
resolution is not a prob for VPN clients. To patch the
problem i had to run hosts files. When they ping a DNS
name (main server) we get a return for an incorrect IP
(totally wrong). So it seems they are not resolving dns
nameS from our dns server BUT FROM A dns SERVER ON THE
NET. I have tried changing the 'Default gateway on remote
network' setting on the VPN properties, no joy. Ipconfig
reveals that the have got the correct DNS servers
configured from the DHCP relay agent.

Main server is now upgraded to 2003 and still the problem
persists.

 

[Herb Martin]

What settings for DNS do they show when connected (IPConfig)?
-- without that information you haven't really checked it yet.

How are you assigning them a DNS server? (Directly from RRAS
or by RRAS using a DHCP server?)

It is common for the RRAS server to be setup differently or incorrectly
for the clients and if it gives it's own settings this may be (part of) the
problem.

IF the clients are set to the correct DNS server, what happens when
you run NSLookup (or another tool) to query for a resource server
expected to be listed on the DNS? Do you get the answer?

What happens if you lengthen the timeout? nslookup -time=10 etcetcetc

Are you running any filters on the RRAS? Can you resolve names using
that SAME DNS (the clients are set to use) FROM the RRAS server?

 

[haggis]

Ipconfig shows all the correct setting for the DNS
server. They get the scope settings (which are correct)
through the DHCP relay agent on RRAS. Basically nothing
resolves through RRAS unless hosts file running on client.

The other thing is this problem manifested itself
somehow. It was working fine and has since i started this
job 18 months ago. The only thing that was done on this
server was 2 days prior to this problem appearing i had
run ADPREP to prepare this server for 2003 upgrade. Since
then it has been upgraded and problem still persists.

 

[Herb Martin]

Ipconfig shows all the correct setting for the DNS

server. They get the scope settings (which are correct)
through the DHCP relay agent on RRAS. Basically nothing
resolves through RRAS unless hosts file running on client.

Well it is one thing to say "all correct settings" and quite another
to give us the pertinent details and steps you took to test, with results.

If you say it is "all correct" we can only commiserate.