Domains, VPN, and DNS Suffix Inheritence
This problem has alluded me for a while so I'm posting it here. I'll try to explain in as much detail as possible because I'm stumped at this point. I have Windows XP SP 3 computers on a domain, we'll call it domaina.com for this pages purposes. These computers connect to a Windows server 2003 R2 DC and use MS Exchange 2007 on another Windows Server 2003 R2 box on domaina. When I VPN into a Cisco ASA, either using the IPSEC or SSL AnyConnect client, it causes certain tasks on the computer to slow down. When I say slow down I mean things like trying to open My Computer, the run dialogue, or opening up new windows in a browser (IE or Firefox do the same thing) it will hang for about 30 seconds before it does anything. It only does this to client computers that are on a domain, any time I use a computer not connected to a domain, such as my home PC everything works great.There are a few quirks I can't put my finger on. If I connect to the VPN and inherit DNS information for domainb.com I can sometimes access things via NETBIOS naming conventions, sometimes I can't. So typing serverb should take me to serverb.domainb.com. I can usually do the same for domaina.com. Every so often one or both domains won't work with naming conventions. I can always access both domains by IP. Every time that I connect over the VPN my ability to browse local DNS gets screwed up. I believe this is because the DNS server of the VPN sees my local domain with an external address (My local domain in my office has a real world IP that's known globally for a website so it always wants to find that instead. I know this isn't good but it's how it was setup when I got here.)I've tried manually managing DNS suffix inheritance to force domaina.com to be my primary suffix and it seems to help but I still get slowness when trying to access my computer, run dialogue, etc. I was thinking about removing the DNS entries from the VPN all together but this will screw up my ability to search locally across domainb.com. Non domain clients aren't having this issue so I'm just creating problems for everyone by removing DNS from the VPN's group policiesCan anyone tell me why the client on the domain is slowing down the way it is?1 person needs an answerI do too
June 8th, 2010 3:23pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics