VPN Tunnel with the DNS blues.

Prosmart

Greetings

We have two offices - lets call them "Head" and "Branch" for the sake of discussion each of which runs their own LAN: Head = 192.168.0.0 and Branch = 192.168.1.0.

We have successfully get a VPN tunnel established with an ASUS DSL-AC68U on the Branch end and a TP-Link TL-WDR4300 v1 on the Head end.

Routes are working correctly from Branch (192.168.1.0) to Head (192.168.0.0) so Branch machines can successfully ping Head machines using their IP addresses. Traffic from Branch to Head is is routed via the VPN with all other traffic going out normally.

Now here is the catch, We need to set up some machine in "Head" that will be accessible by name rather than by IP address. There will be quite a few of them (Virtual Machines) that will vary from day to day.

We added these:

address=/idrac/192.168.0.120
address=/nigel/192.168.0.10

to dnsmasq at Head and from the Head office we can now ping these names (which are not defined anywhere else, but we don't seem to be able to tell "Branch" to use a specific DNS server as well as it's "normal" DNS servers. i.e. if a machine in Branch tries to ping "server-1", we want the Branch to look first in the VPN DNS (which is the Head" router 192.168.0.1) and then fall back to its normal DNS.

We have tried adding this to the VPN Additional Config:

push "route 192.168.0.0 255.255.255.0"
push "dhcp-options DNS 192.168.0.1"

and although the route works, the DNS seems to be unaffected.

Does anyone have any suggestions where we should start?

TIA

Nigel.

Prosmart

Anyone care to explain why this has been classified as "Off Topic" and cast adrift in the Sargasso Sea of unanswered questions?

TinCanTech

All Openvpn can do with DNS is push DNS server IP or Domain.

DNS problems have nothing to do with Openvpn.

And, as you pointed out:

Prosmart wrote We have successfully get a VPN tunnel established

Your VPN works ..

Edit: Openvpn can also manipulate the Windows Firewall to ensure there are no DNS leaks once a suitable VPN is established.

TinCanTech

FYI: "off topic, related" is not the Sargasso Sea of which you speak ..

This is that Sea:
https://forums.openvpn.net/viewforum.php?f=6

And this is the speech.

Prosmart

"DNS problems have nothing to do with Openvpn."

never said they did - I was asking for advice and/or help in a subject area that I am not that familiar with. It relates to OpenVPN because we are using OpenVPN - go figure.

TinCanTech wrote FYI: "off topic, related" is not the Sargasso Sea of which you speak ..
This is that Sea:
https://forums.openvpn.net/viewforum.php?f=6
And this is the speech.

and not to start a flame war but it only took nine days to think of a witty comeback? - your talents are wasted on here!

TinCanTech

Prosmart wrote I was asking for advice and/or help in a subject area that I am not that familiar with. It relates to OpenVPN because we are using OpenVPN - go figure

what ever your issue is it has nothing to do with openvpn.

Prosmart wrote but it only took nine days to think of a witty comeback

I am in no hurry to please you nor anybody else.