%% You should probably cite rfc8598 instead of this I-D. @techreport{ietf-ipsecme-split-dns-15, number = {draft-ietf-ipsecme-split-dns-15}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-ietf-ipsecme-split-dns/15/}, author = {Tommy Pauly and Paul Wouters}, title = {{Split DNS Configuration for IKEv2}}, pagetotal = 15, year = 2018, month = nov, day = 22, abstract = {This document defines two Configuration Payload Attribute Types (INTERNAL\_DNS\_DOMAIN and INTERNAL\_DNSSEC\_TA) for the Internet Key Exchange Protocol Version 2 (IKEv2). These payloads add support for private (internal-only) DNS domains. These domains are intended to be resolved using non-public DNS servers that are only reachable through the IPsec connection. DNS resolution for other domains remains unchanged. These Configuration Payloads only apply to split tunnel configurations.}, }