RRAS DNS Entries from Windows Vista / 7 Clients

Posted by Christopher on Server Fault See other posts from Server Fault or by Christopher
Published on 2009-10-29T19:08:19Z Indexed on 2010/05/24 23:11 UTC
Read the original article Hit count: 654

Filed under:
|

How do I stop a Win 2003 RRAS server from sending it's own DNS info to the VPN Client?

We have RRAS running on Win 2003 Server. The server has a fixed IP, but the RRAS is setup to use DHCP for assigning VPN client IPs.

Our DHCP is setup to send 4 DNS server entries in this order:

  • Internal DNS Server
  • Backup Internal DNS Server
  • External DNS Server
  • Backup External DNS Server

Here's the thing: the RRAS server seems to automatically send it's own DNS entries (from it's NICs) to the client first, and then the entries from DCHP are applied. But since the RRAS server has Internal DNS and Backup Internal DNS as it's own DNS entries, it sends these first, and when the DCHP DNS entries come down, only the ones not already added get added (just the externals). This results in the following DNS list on the VPN client:

  • External DNS Server
  • Backup External DNS Server
  • Internal DNS Server
  • Backup Internal DNS Server

This is no good of course, because internal names will no longer resolve.

How do I stop the RRAS server from sending it's own DNS info to the VPN Client?

Note this doesn't seem to happen on WinXP - it gets the DNS servers direct from the DHCP in the correct order.

© Server Fault or respective owner

Related posts about dns

Related posts about rras