I have been thinking if we configured "tunnel-group xxx webvpn-attributes" even though this is not a webvpn tunnel group and as sub-option we would have "dns-group NAME" in what we are able to select a set of dns for using it. Well, I don't think that would resolve the ping/tracert from appliance though. Maybe only DefaultDNS works
On Sat, Oct 2, 2010 at 1:44 PM, Bruno <[email protected]> wrote: > I don't know whether it is correct or not. I have tried using in another > dns group besides DefaultDNS group and it didn't work. Once I configured it > under Default, it works and the remote vpn also can use ASA to go out for > internet. > > On Sat, Oct 2, 2010 at 1:01 PM, Kingsley Charles < > [email protected]> wrote: > >> Waiting for your inputs :-) >> >> >> On Fri, Oct 1, 2010 at 10:23 PM, Kingsley Charles < >> [email protected]> wrote: >> >>> Hi all >>> >>> In the IOS we are able to configure DNS server globally but in the ASA >>> the DNS groups are configurable and can be associated to tunnel groups for >>> Remote VPN DNS resolutions. >>> >>> I don't see the similar command in ASA as IOS for global resolution like >>> Ping or Telnet to hostnames which needs DNS resolution. >>> >>> I guess, the ASA will refer to the DefaultDNS group for global >>> resolution. >>> >>> Please let me know, if my understanding is correct. >>> >>> >>> >>> >>> >>> With regards >>> Kings >>> >> >> >> _______________________________________________ >> For more information regarding industry leading CCIE Lab training, please >> visit www.ipexpert.com >> >> > > > -- > Bruno Fagioli (by Jaunty Jackalope) > Cisco Security Professional > -- Bruno Fagioli (by Jaunty Jackalope) Cisco Security Professional
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com
