Different DNS-configuration for groups?

[erik.westlund@vikingdata.se]

Hello,

I am looking for a way to push different DNS-servers to different users accessing the OpenVPN AS.

I am investigating the use of OpenVPN AS as a vpn concentrator for our hosting solution, and I have managed to make users of different company's connect to their company's servers through OpenVPN. The authentication is made through RADIUS/MOTP and it is working like a charm. My only headache is that I want the clients to use different DNS-servers depending of which company they belong to.

I know that this is possible running the standard openvpn client by putting "push "dhcp-option DNS XX.XX.XX.XX" in the configuration-file, but I want this to be bundled with the configuration file that is created by OpenVPN AS web-site.

Is it possible to make changes to the autogenerated configuration some way or is there some other solution to this?

Best regards
Erik

[swg0101]

Like you said, DNS options are pushed out by the server (thus this is not saved in the configuration file).
That said, there is no one stopping you from specifying client scripts for the different groups that would do whatever you want to do (whether it is a change in the DNS settings, or something else).
Good luck.

[erik.westlund@vikingdata.se]

Thanks for your reply,

I have looked at the client scripting, but I am not able to figure out how to put in an DNS configuration in the "Windows user connect"-script box.

Could you provide me with a example or info on how I can make use of the client scripting feature to put in a custom DNS-server?

I have looked for a couple of days to find some information on how to do this, but I have not yet found any information on how to accomplish this.

Best regards
//Erik

Like you said, DNS options are pushed out by the server (thus this is not saved in the configuration file).
That said, there is no one stopping you from specifying client scripts for the different groups that would do whatever you want to do (whether it is a change in the DNS settings, or something else).
Good luck.

[swg0101]

I think this TechNet article will assist you:
http://technet.microsoft.com/en-us/libr ... spx#BKMK_5