Kerio Tech 6 - page 314

Chapter 23 Kerio VPN

314

This step will create rules for connection of the VPN server as well as for communication

of VPN clients with the local network (through the ﬁrewall).

Figure23.33 Headquarter— default traﬃc rules for Kerio VPN

3. Customize DNS conﬁguration as follows:

•In the WinRoute’s DNS module conﬁguration, enable DNS forwarder (forwarding

of DNS requests to other servers).

•Enable the Use custom forwarding option and deﬁne rules for names in the

filial1.company.com and filial2.company.com domains. To specify the for-

warding DNS server, always use the IP address of the WinRoute host’s inbound

interface connected to the local network at the remote side of the tunnel.

Figure23.34 Headquarter— DNS forwarding settings

•Set the IP address of this interface (10.1.1.1) as a primary DNS server for the

WinRoutehost’s interface connected to the LAN 1 local network. Itis not necessary

to set DNS at the interface connected to LAN 2.

•Set the IP address 10.1.1.1 as a primary DNS server also for the other hosts.