Tutorial: Configure Domain Routing in Access Server⁠

Global domain routing rules apply to all users.

1. Sign in to the Admin Web UI.

2. Click Access Controls.

   • The Group and User Access Rules tab displays.

3. Click the Global Access Rules tab.

4. Under Domains, select the global routing mode:

   • NAT: Source IP appears as the Access Server public IP.

   • Route: Source IP appears as the VPN client's IP address.

5. Specify a domain, wildcard domain, or wildcard TLD in the Domains text field.

6. Click Save and Restart.

Use this procedure to configure domain routing for a specific user or group.

1. Sign in to the Admin Web UI.

2. Click Users or Groups.

3. Select the user or group you want to configure.

4. Click the Access Rules tab.

5. Click New Access Rule.

6. In the Address field, enter a domain:

   • Use an exact domain (for example, example.com) to match only that domain.

   • Use a wildcard (for example, *.example.com) to match the domain and all subdomains.

   • Use a wildcard TLD (for example, *.com) to match all the domains that use this TLD.

7. Select how the destination is reachable:

   • NAT: Source IP appears as the Access Server public IP.

   • Route: Source IP appears as the VPN client's IP address.

8. Observe that Protocol and Port fields are disabled when a domain is entered.

9. Click Save rule and Restart.

1. Click Access Controls.

   • The Group and User Access Rules tab is displayed.

2. Confirm the domain appears correctly in the Destination column of the Access Rules list for user and group access rules.

3. Click the Global Access Rules tab.

4. Confirm the global domain rules display under Global Access Rules > Domains.

5. If affected users are connected to the VPN when a domain routing rule changes, their VPN connections are re-established to apply the updated configuration.

You can edit or remove domain routing rules from either the global access rules page or from a specific user or group, depending on where the rule exists.

Domain routing allows precise control over which domains are routed through the VPN, without relying on static IP addresses. You can apply rules globally or scope them to specific users or groups, using either exact or wildcard domains.