[ASK] IPsec mode-config

RouterOS General
1

I got one question about IPsec.

“/ip ipsec mode-config static-dns or system-dns.”

Basically means if other side has restriction like openDNS for some website with static-dns and system-dns we avoid restriction.

Thanks

2

Static-dns and system-dns just informs the client/initiator what DNS servers should be used when tunnel is established. If the client reaches these DNS servers over the tunnel (DNS servers are within IPsec traffic selectors/policies), then obviously DNS traffic will be sent over the tunnel and will bypass any DNS restrictions set by internet provider.

3

In my case doesn’t go. On my PC I’m using free Shrew Client ( i found on free version doesn’t include the Split DNS feature), but also from iPhone i got same result.


Thanks

4

From now it starts to work, i didn’t change the configuration.I was pretty sure that i’m on correct way, just i was i wanted to double check with you guys.

It Works!!!