Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have done the setup of a ipsec/l2tpd vpn server followin this tutorial

I'm able to connect to the server, and redirect all traffic through the vpn from a mac os machine.

In the remote accessed network, there is a bind dns server that the remote machines use as a local dns (they use it as a dns, and are able to access the local machines names defined there, and other Internet hosts).

The problem is that, pushing that dns to the vpn client, gives me access to the local names, but not internet host name resolution. If I push the google dns, I can get name resolution and web browsing through the vpn, but obviously, not the local name ones.

This is my options.xl2tpd file:

asyncmap 0
name l2tpd
lcp-echo-interval 30
lcp-echo-failure 4

Traceroutes with the above config:

traceroute to (, 64 hops max, 52 byte packets
 1 (  14.823 ms  13.544 ms  14.154 ms
 2 (  13.740 ms  11.511 ms  14.794 ms

traceroute: unknown host

Any help will be appreciated. Kind regards, Simon.


Uncommenting the second ms-dns line, makes the client work as expected under windows, but fails in mac os or iOs. Looking to make it work in apple devices.

share|improve this question
up vote 1 down vote accepted

Maybe I am being stupid, but can you not just uncomment:


This would then attempt to resolve a DNS entry at, which will fail and then send the attempt to the second DNS server,, which should work?

Also, it maybe worth seeing if you can forward specific domain traffic to a server, which is normally done by typing:

ms-dns /
share|improve this answer
Well, crazy enough... uncommenting that line makes the setup work perfectly, under windows (all my tries yesterday was under mac os). It won't work either on ios (iphone). Thanks for your help boburob. I just need now to make it work on apple devices ;). – Simon Aug 3 '12 at 11:14

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.