Skip to main content
plejon
plejon
New Member
August 2, 2015
Question

SSL vpn -> AD dhcp entry

  • August 2, 2015
  • 1 reply
  • 5169 views

Been wondering how to sole an issue regarding dhcp entrys on Microsoft AD.

For the AD to be able to speak to hosts it needs an DHCP entry to map the host to an ip.

This not done while using the SSL vpn since connecting clients are given an IP from the SSL vpn ip pool.

 

The connecting hosts can speak to the AD, but not the other way around.

Just wondering if there's any way to solve this. Or is it something that has to be changed on AD?

    1 reply

    gschmitt
    gschmitt
    New Member
    August 3, 2015

    plejon wrote:

    For the AD to be able to speak to hosts it needs an DHCP entry to map the host to an ip.

    The AD doesn't map IP addresses

    The IP>Hostname mapping comes from the DNS server

     

    What are you trying to accomplish with this?

    plejon
    plejonAuthor
    New Member
    August 3, 2015

    Hi, thanks for your answer.

    I'm not all that into Microsoft. I'm just a network dude.

    I was told by the internal It tech guy that he need a dhcp querry for the dns to mapp hosts to the AD or domain controller.

     

    i think dns, dhcp, ad and so on is on the same hosts.

     

    But what he said what that the AD cannot speak with SSL clients because he does not have a dns host for them. because they are not given an IP from the internal server.

    gschmitt
    gschmitt
    New Member
    August 3, 2015

    plejon wrote:

    I was told by the internal It tech guy that he need a dhcp querry for the dns to mapp hosts to the AD or domain controller.

     

    i think dns, dhcp, ad and so on is on the same hosts.

     

    But what he said what that the AD cannot speak with SSL clients because he does not have a dns host for them. because they are not given an IP from the internal server.

    Try this first:

     

    Create a new policy

    Source Interface: internal (or where your DC is located)

    Source Address: your DC, DNS

    Destination Interface: ssl.root

    destination address: SSLVPN_TUNNEL_ADDR1 (your IP Range)

    Service: all

    Action: Accept

    Terms & ConditionsAccessibility statement