rossnick
Hi all !
I have an openvpn server setup, used to access server and workstations on our corporate network. The connection is working properly, I can ping servers and workstation, do RDP, ssh, etc.
On our corporate net, we have our own DNS server that serves our public domain name, domain.com for exemple, as well as our private "domain.priv" local domain. On our local lan, DHCP is configured to push "domain.priv" as domain-name. So a connection to just "server" is expended to server.domain.priv.
------------- server.conf -------------------
local 192.168.110.3
port 1194
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key # This file should be kept secret
dh dh2048.pem
server 10.107.0.0 255.255.255.128
ifconfig-pool-persist ipp.txt
push "route 192.168.7.0 255.255.255.0"
push "route 192.168.110.0 255.255.255.0"
client-config-dir ccd
route 10.108.0.0 255.255.255.0
push "dhcp-option DNS 192.168.110.2"
push "dhcp-option DOMAIN domain.priv"
push "dhcp-option WINS 192.168.7.7"
keepalive 10 120
comp-lzo
user nobody
group nobody
persist-key
persist-tun
status openvpn-status.log
verb 3
--------------------------
----------------- client.conf --------------
client
dev tun
proto udp
remote vpn.domain.com 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert client-01.crt
key client-01.key
ns-cert-type server
comp-lzo
verb 3
register-dns
--------------------------
With this config, the windows client gets the proper config for the DNS, as reported by ipconfig, I see the "domain.priv" DNS suffix for that connection. If I try to ping server.domain.priv, it works imediatly. But If I try to ping just "server", the command has a 20 second pause, and then it resolves and pings. After that, the client as the reslut in it's cache and it's ok afterward...
On this windows 7 machine, ipv6 is disabled on all interfaces. I do have some custom DNS settings on my network settings, to add "domain.com" as a search suffix. But the DNS server primarly used is the one provided by dhcp by router.
Thanks for any hints to solve this delay !
rossnick
The fact that it's openvpn that pushes the domain.priv domain and DNS server to use, the client uses it, but with huge delay...
rossnick
I just did more google searches using different terms than the ones I've been doing for the past few days, and I found some posts, dating back from 2008, that it's more a problem with windows all together than with openvpn per se...
