Contents

NetworkVPNIKEV2DNSObject

A dictionary to use for all VPN types.

Declaration

object NetworkVPNIKEV2DNSObject

Properties

NameTypeDescription
DomainNamestring

The primary domain of the tunnel.

IdentityAssetReferencestring

The identifier of a credential asset declaration that contains the identity that the system uses to authenticate the user to the DNS resolver.

SearchDomains[string]

The list of domain strings used to fully qualify single-label host names.

ServerAddresses Required[string]

The array of DNS server IP address strings. These IP addresses can be a mixture of IPv4 and IPv6 addresses.

SupplementalMatchDomains[string]

The list of domain strings used to determine which DNS queries use the DNS resolver settings in ServerAddresses. The system uses this key to create a split DNS configuration where it resolves only hosts in certain domains using the tunnel’s DNS resolver. The system uses the default resolver for hosts that aren’t in one of the domains in this list.

If SupplementalMatchDomains contains the empty string it becomes the default domain.

Split-tunnel configurations can direct all DNS queries to the VPN DNS servers before the primary DNS servers. If the VPN tunnel becomes the network’s default route, the servers listed in ServerAddresses become the default resolver and the system ignores the SupplementalMatchDomains list.

SupplementalMatchDomainsNoSearchboolean

If true, don’t append the domains in the SupplementalMatchDomains list to the resolver’s list of search domains.

See Also

Objects