Undocumented ipsec mode config option split-dns ?

RouterOS General
1

When I print my mode config options, I see something like this:

 /ip ipsec mode-config> print
Flags: * - default, R - responder
 0 *  name="request-only" responder=no use-responder-dns=exclusively

 1  R name="modeconf vpn.mydomain.com" system-dns=no static-dns=10.0.88.1 address-pool=pool.mydomain.com
      address-prefix-length=32 split-include=192.168.13.0/24 split-dns=""

The mode-config is documented here: https://wiki.mikrotik.com/wiki/Manual:IP/IPsec#Mode_configs but the split-dns option is missing. I can see that it is a string, but what does it mean? What is it for?

2

Split DNS can be used to tell the VPN client to query specific DNS domains over the provided DNS server, rather than all DNS requests.
For example, you can input “corp.local”, and the client would only query DNS queries for “*.corp.local” over the VPN-provided DNS, rather than all DNS queries.

It’s the same concept as for split-routing, applied to DNS.

3

just i want to add something here, if you want to use that features by using windows machine you would be not able to get , because windows doesn’t support it

4

Thanks. Sorry for the late reply. Does mikrotik ipsec ikev2 client support split-dns? I can only see that modeconf has this option on the server side.