- Products
- Network Security
Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
Security ServicesComprehensive security for your network security solution
Network Security ManagerModern Security Management for today’s security landscape
- Advanced Threat Protection
Capture ATPMulti-engine advanced threat detection
Capture Security applianceAdvanced Threat Protection for modern threat landscape
- Access Security
Cloud Edge Secure AccessDeploy Zero-Trust Security in minutes
Secure Mobile AccessRemote, best-in-class, secure access
Wireless Access PointsEasy to manage, fast and secure Wi-FI
SwitchesHigh-speed network switching for business connectivity
- Email Security
Email SecurityProtect against today’s advanced email threats
- Cloud Security
Cloud App SecurityVisibility and security for Cloud Apps
Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
- Endpoint Security
Capture ClientStop advanced threats and rollback the damage caused by malware
Content Filtering ClientControl access to unwanted and unsecure web content
- Product Widgets
- Product Menu Right Image
- Network Security
- Solutions
- Solutions Widgets
- Solutions Image Widgets
- Solutions Widgets
- Partners
- Partner Widgets
- Partners Image Widgets
- Partner Widgets
- Support
- Support Widget
- Support Image Widgets
- Support Widget
- Products
- Network Security
- Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
- Security ServicesComprehensive security for your network security solution
- Network Security ManagerModern Security Management for today’s security landscape
- Advanced Threat Protection
- Capture ATPMulti-engine advanced threat detection
- Capture Security applianceAdvanced Threat Protection for modern threat landscape
- Access Security
- Cloud Edge Secure AccessDeploy Zero-Trust Security in minutes
- Secure Mobile AccessRemote, best-in-class, secure access
- Wireless Access PointsEasy to manage, fast and secure Wi-FI
- SwitchesHigh-speed network switching for business connectivity
- Email Security
- Email SecurityProtect against today’s advanced email threats
- Cloud Security
- Cloud App SecurityVisibility and security for Cloud Apps
- Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
- Endpoint Security
- Capture ClientStop advanced threats and rollback the damage caused by malware
- Content Filtering ClientControl access to unwanted and unsecure web content
- Product Widgets
- Product Menu Right Image
- Network Security
- Solutions
- Solutions Widgets
- Solutions Image Widgets
- Solutions Widgets
- Partners
- Partner Widgets
- Partners Image Widgets
- Partner Widgets
- Support
- Support Widget
- Support Image Widgets
- Support Widget
With IPV6 enabled on Windows 10 DNS resolution for remote network via VPN connection fail to resolve
03/26/2020 
9 People found this article helpful
93,512 Views
Description
- With IPV6 enabled on Windows 10 DNS resolution for remote network via VPN connection fail to resolve.
- We have reviewed name resolution working fine with IPV6 disabled.
- IPV6 Discussion forum with respect to DNS Resolution over VPN.
- Network traffic for remote resources were found to be traversing through Local LAN interface rather than Tunnel interface.
Resolution
- Post reviewing this behavior SonicWALL Engineering have identified the issue was related to metric value with respect to Interface.
- Post enabling of IPV6 metric Value precedence was given to Local Interface rather VPN Interface.
- These values could be manually changed in "rasphone.pbk" (IpInterfaceMetric=0 => IpInterfaceMetric=1 )
- SonicWALL Engineering have found a workaround to avoid manual modification of rasphone.pbk through Configuration Management extension (CEM).
- Log in to AMC.
- Click on Maintenance in the left-hand navigation menu.
- In the URL, append "?advanced=1", and hit return.
- Click on Configure under the new section Configuration extensions.
- Click New
- For the Key field, put in EVPN_DISABLE_ROUTE_METRIC_CHANGE
- For the Value field, put in 1.
- Click OK.
- Click Save,
- Apply Changes (this will force an apply-all, making the changes take effect).
- CEM Could be used on standalone devices or could be pushed from CMS to all Managed devices.
- This issue is seen with recent compiled binaries and updates.
- Such changes pushed are applied during tunnel instance. All values related to metric would be restored to default post Tunnel disconnection.
ISSUE ID:
191773
Related Articles
- CT with Device Guard is stuck on Identifying when GVC Client is installed
- SMA1000: CT compatibility with 3rd party VPN clients like GVC, Citrix and Fortinet
- How can I upgrade firmware in SMA 1000 series appliance?
YES
NO