VPN and DNS

[Digitus]

Hi guys
I have a very strange problem that I'm having great difficulties resolving.
I have a Windows 2000 server which is running the Routing and Remote Access
Software that ships with Windows 2000 server. We use it for both Dial in and
VPN. All clients (both XP and 2000 Pro) connect correctly to the server,
however when the clients get the IP address from the server, they get the
DNS settings twice and the last time in the wrong order. I.e.our ISP's DNS
server becomes the primary instead of our internal one which should be the
primary. See results from IPconfig below

Ipconfig result on the VPN clients.

PPP adapter VPN connnection:

Connection-specific DNS Suffix . : **********.com
Description . . . . . . . . . . . : WAN (PPP/SLIP)
Interface
Physical Address. . . . . . . . . : 00-53-45-00-00-00
Dhcp Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : x.y.131.164
Subnet Mask . . . . . . . . . . . : 255.255.255.255
Default Gateway . . . . . . . . . : x.y.131.164
DNS Servers . . . . . . . . . . . : 158.43.128.72
//This entry shouldn't be here
x.y.131.147
//This entry shouldn't be here
x.y.131.147
158.43.128.72
Primary WINS Server . . . . . . . : x.y.131.147
Secondary WINS Server . . . . . . : x.y.131.147


The VPN server is set up with static IP, but the DHCP Relay agent is
installed and configured correctly (from what I can see). I just can't work
out how to prevent the clients from getting the DNS settings twice. Can
anyone help?




ipconfig result on the VPN server:

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : 3Com 3C920 Integrated Fast
Ethernet Controller (3C905C-TX Compatible)
Physical Address. . . . . . . . . : 00-B0-D0-53-D2-53
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : x.y.131.162
Subnet Mask . . . . . . . . . . . : 255.255.255.128
Default Gateway . . . . . . . . . : x.y.131.129
DNS Servers . . . . . . . . . . . : x.y.131.147
158.43.128.72
Primary WINS Server . . . . . . . : x.y.131.147

PPP adapter RAS Server (Dial In) Interface:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : WAN (PPP/SLIP) Interface
Physical Address. . . . . . . . . : 00-53-45-00-00-00
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : x.y.131.173
Subnet Mask . . . . . . . . . . . : 255.255.255.255
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . :


Best regards,

Jan

 

[Bill Grant]

The remote client initially gets this info as part of the connection
process (from the RRAS server). After it connects, it can access the DHCP
server to get the settings specified there. But I would expect that to be an
overwrite, not an extra set of addresses.

You can always turn off automatic and configure the values manually in
the client's connection properties.

 

[Digitus]

I could, but that would lead to a lot of extra work...

The workaround I've done so far is to disable DHCP Relay agent on the
server, and that seems to have done the trick so far. However I thought that
earlier this week ;-).

Best regards

Jan