Skip to main content
martyyy
martyyy
Explorer III
July 31, 2024
Solved

Can't see the IP address in windows DNS

  • July 31, 2024
  • 2 replies
  • 1206 views

FG is the DHCP server. FG DHCP is issuing IP correctly and we can see the IP. The problem is we cant see the IP address in wiindows DNS so we cant do an nslookup or resolve the PC name to IP.
I want to know if there is a config so that FG relay the DHCP info to windows DNS.

 

This is the article I'm looking right now. 

https://community.fortinet.com/t5/FortiGate/Technical-TIP-Different-options-of-configuring-DNS-server-on/ta-p/278967

 

TIA :) 

Best answer by xshkurti

One solution would be to configure DHCP relay and set DHCP server in Windows machine. 
This way IP Entries from DHCP will be populated to DNS server.
Multiple DHCP relay servers | FortiGate / FortiOS 7.4.4 | Fortinet Document Library

2 replies

xshkurti
Staff
xshkurtiAnswer
Staff
July 31, 2024

One solution would be to configure DHCP relay and set DHCP server in Windows machine. 
This way IP Entries from DHCP will be populated to DNS server.
Multiple DHCP relay servers | FortiGate / FortiOS 7.4.4 | Fortinet Document Library

    martyyy
    martyyyAuthor
    Explorer III
    August 2, 2024

    Hi @xshkurti ,

    We dont really want to relay this subnet to win DHCP server hence looking if FG will update win DNS.
    Let me know if this is possible.

    Thank you :) 

    pminarik
    Staff
    pminarik
    Staff
    August 2, 2024

    FGT cannot propagate IP changes to modern Windows DNS.

    It supports dynamic DNS updates on behalf of clients, but not with the type of encryption that modern Windows DNS requires by default.

     

    Realistically your only option is to configure your endpoints to update their DNS records on their own, and allow that in your DNS server. (or move to Windows DHCP and FortiGate only relaying, which you already rejected)

     

    For the sake of completeness, here's the doc on how to do the non-secure dynamic DNS updates in a Win environment: https://community.fortinet.com/t5/FortiGate/Technical-Tip-Configure-DDNS-update-override-in-FortiGate-DHCP/ta-p/191554

      Terms & ConditionsAccessibility statement