5

I have set up a VPN connection using my FritzBox 6330. This works great on my Macbook Air if I specify a DNS server (192.168.178.1 - which is the address of my FritzBox) in the network settings of the VPN.

On iOS however there is no such entry field, hence no names can be resolved. The VPN itself works. I can connect to various IP addresses.

Improve this question
1
  • iOS 7x I presume?
    – Ruskes
    Commented Jun 30, 2014 at 8:00

3 Answers 3

Reset to default
3

The DNS settings over a VPN connection should be forced by the VPN server. This makes sure DNS queries get routed securely over the VPN, and allows you to see private services on the intranet that may not be exposed as public DNS records.

It's possible the VPN server may not be telling iOS what DNS server to use, something that could be solved by a configuration change in the VPN server?

Improve this answer
3
  • 3
    This indeed is true and the solution was simple: I rebooted the FritzBox and now it works.
    – Krumelur
    Commented Jun 30, 2014 at 14:57
  • This might work, but the explanation is wrong - VPN routes traffic, and that will include DNS normally too, so all DNS will always be secure. The problem is that most DNS will not answer queries from unknown IPs, so you need to change the DNS you use when you change the IP you're using as well.
    – cnd
    Commented Sep 1, 2015 at 5:19
  • Rebooting the Fritzbox fixed the same problem for me!
    – WalterBeiter
    Commented Jun 7, 2019 at 15:20
2

When using IKEv2, iOS ignores pushed DNS settings when split-include tunnelling is used.

Improve this answer
4
  • So how do we include VPN dns server to use by the system in case of split tunnel with match domains?
    – iSpark
    Commented Dec 1, 2020 at 1:58
  • @iSpark IIRC, you can specify it in .mobileconfig files. It allows a lot more control, and I think it is possible within the rule cascade developer.apple.com/business/documentation/…
    – paradroid
    Commented Dec 1, 2020 at 2:10
  • I see DNS resolution issue on iOS14 and macOS11 with spilt VPN, do you see any issue there?
    – iSpark
    Commented Dec 1, 2020 at 2:19
  • @iSpark I don't think this is new to iOS14. Both Apple macOS and iOS won't use the pushed DNS server setting with split-includes. But I think this can be avoided using .mobileconfig configuration (not tested myself yet, until I get another issue dealt with).
    – paradroid
    Commented Dec 1, 2020 at 2:24
0

See complete Answer here:

The Wi-Fi settings are easy to override using the device itself, but it's not global but instead an override on a per-network name basis. Go to the network settings for a specific Wi-Fi. Under the detailed screen (tap the blue > sign once you are connected) and swipe up to expose the DHCP / BootP / Static IP address part of the screen. You can tap to edit DNS and append, delete or substitute your choice of DNS settings from that screen.

When I need to run a custom DNS, I often use VPN to get to a router with known settings and this works over Wi-Fi and cellular data since all traffic goes to the VPN where I can control the DNS. This requires time and a server (Amazon web service free tier is ideal for low cost hosting).

Source: bmike

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .