DNS for remote users

[KomisarzRyba]

Hello,

I would like a selected group of remote users to query a selected DNS server different than the rest of the remote users. Can this be configured on R81.10?

[PhoneBoy]

Office Mode DNS servers are per-gateway and cannot be specified per-user/group.

[KomisarzRyba]

What about https://support.checkpoint.com/results/sk/sk33422

Or exemple from file:

#
# file: ipassignment.conf
#
# This file is used to implement the IP-per-user feature. It allows the
# administrator to assign specific addresses to specific users or specific
# ranges to specific groups when they connect using Office Mode or L2TP.
#
# The format of this file is simple: Each line specifies the target
# gateway, the IP address (or addresses) we wish to assign and the user
# (or group) name as in the following examples:
#
# Gateway Type IP Address User Name
# ============= ===== ======================================== =========================================
# Paris-GW, 10.5.5.8, Jean
# Brasilia, addr 10.6.5.8, wins=(192.168.3.2,192.168.3.3) Joao # comments are allowed
# Miami, addr 10.7.5.8, dns=(192.168.3.7,192.168.3.8) CN=John,OU=users,O=cpmgmt.acme.com.gibeuu
# 10.1.1.2 range 100.107.105.110-100.107.105.119/24 Finance
# * net 10.7.5.32/28 suffix=(acct.acme.com) Accounting

[the_rock]

I never tested it myself, but thats exactly what TAC suggested to customer once and it did actually work for them.

Andy

[PhoneBoy]

I stand corrected then. 🙂

[the_rock]

@PhoneBoy