Kerio Tech 6 - page 329

23.6 Example of a more complex Kerio VPN conﬁguration

329

3. Customize DNS conﬁguration as follows:

•In the WinRoute’s DNS module conﬁguration, enable DNS forwarder (forwarding

of DNS requests to other servers).

•Enable the Use custom forwarding option and deﬁne rules for names in the

company.com and filial1.company.com domains. Specify the server for DNS

forwarding by the IP address of the remote ﬁrewall host’s interface (i.e. interface

connected to the local network at the other end of the tunnel).

Figure23.54 TheParis ﬁlial oﬃce — DNS forwarding settings

•Set the IP address of this interface (172.16.1.1) as a primary DNS server for the

WinRoutehost’s interface connected to the LAN 1 local network. Itis not necessary

to set DNS at the interface connected to LAN 2.

•Set the IP address 172.16.1.1 as a primary DNS server also for the other hosts.

4. Enable the VPN server and conﬁgure its SSL certiﬁcate (create a self-signed certiﬁcate if no

certiﬁcate provided by a certiﬁcation authority is available).

Note: A free subnet which has been selected is now speciﬁed automatically in the VPN

network and Mask entries. Check whether this subnet does not collide with any other

subnet in the headquarters or in the ﬁlials. If it does, specify a free subnet.

For a detailed description on the VPN server conﬁguration, refer to chapter 23.1.