how to send DNS suffix (ssl vpn)

Hello User. we are reviewing your question and we will answer you shortly. Thanks.

Hello,

You are kindly advised to check the dns resolve configuration and routes of the dns server.
VPN-instance doesn’t support encapsulate the DNS packet, so there should be a route to direct the DNS packets from the public instance to the vpn-instance. Please refer the configuration below:
update host source ip x.x.x.x vpn-instance PUB_ISP_vod
dns server vpn-instance PUB_ISP_vod
dns resolve
dns server 1.1.1.1
ip route-static 1.1.1.1 32 vpn-instance PUB_ISP_vod x.x.x.x

Thanks

Hi,
Maybe i have not been clear enough. I do not need to resolve domain name, I just need to send the
DNS suffix to ssl client (PC). Like here on a pic below:

  

Hi,
As I know, Currently SecoClient does not support this function, that is, pushing the dns suffix.

I suggest you contact the local TAC for confirmation and apply a development request for the function.

https://e.huawei.com/en/service-hotline-query

There are not so much parameters to configure with network extension in SSL VPN.
But if users will enter full name with domain then they will be able to reach the destination if they could reach the DNS server.

Thank you for your answer!

Hi!
If this function is unavailable at this moment, can I use external dhcp server to set up connection instead of local pool ???

nice

Hi Andrey! 

Now, this function is allowed in the new Secoclient Version 7.0.5.1.
You only need apply this command in the vpn gateway section: dns-domain  xxxxxx 

 Look at this example: 

 v-gateway Access_Guest 

 basic
     

       dns-domain midominio.com

It Works!

I hope this help you.

Regards