DirectAccess and access to a non domain VPN subnet

[CAWJames]

Evening all,

 

I've got a bit of a problem and I think the solution use another solution!

 

Basically we are starting to use DirectAccess on our newer laptops, which works surprisingly well. The only problem we have is that we have a VPN connection to a vendor for a software we use, which is directly accessible on our lan using its IPv4 addresses. The problem is that DA is mostly a IPv6 technology and as the subnet is off site and not on our DNS, ISATAP is a bit of a bust. Is there anyway for those DA computers to route to an IPv4 subnet that is off DNS? I am assuming not and those people who need access to that subnet will have to have a different VPN solution(thankfully its only a handful who need this, so not end of world, but would still like to make DA the defacto solution across our remote computers).

 

Any insights would be gratefully received.

 

Thanks

 

James

[Blue_Cookeh]

DirectAccess works *entirely* on DNS and IPv4 in 6 tunnelling, which unfortunately means you're going to have to add a DNS record for the private IPs your vendor is using, and then make sure the software is using DNS names rather than IP addresses. If you do this make sure your DirectAccess server knows how to get to the IP addresses internally, you may need to add a static route in Windows.

 

Otherwise yup! Full blown VPN solution or make the software accessible via the Internet if appropriate.