Skip to main content
zeno
New Member
November 2, 2018
Question

DNS Issue

  • November 2, 2018
  • 1 reply
  • 3667 views

Hi everyone 

 

I'm new here and i hope someone can help me with my problem

 

our customer network looks like :

stack core switches ---- routers ---- Fortigate --- internet----Fortigate---- datacenter

 

in core switches 3 vlans are configured 

1- vlan 16 for it.local

2- vlan 1 for dsvm

3- vlan 17

4- vlan 18 dmz   (new)

 

 they asked me to create new vlan in same way as the other vlans, after that they asked vlan 16 should talk see vlan 18 so i what i have configured in fortigate :

1- Nat (VIP) port( http and tcp -8080) 

2- ipv4 policy allowed source (all) to destination (VIP)

3- static route for the new range same way as others

4- from the vlans interface to trust interface allowed all -- all 

 

what i achieved is : 

1- i can ping from range vlan 16 to vlan 18 and the same for vlan 18 

2- dns servers for all is in range vlan 16 

10.50.16.31

10.50.16.32

3- i can ping from server in vlan 18 to these dns servers

4- i can telnet port 53 in vlan 18 

 

the problem that i face right now

1- i cannot access any website/page when  i use the dns servers although i can ping them 

2- but when i change it to google dns everything is working properly 

but this is not a good plan to keep it in public dns i have tried a lot to figure it out but without hope so  can i get some help with that 

 

    1 reply

    Carl_Windsor_FTNT
    Staff
    Staff
    November 2, 2018

    This is a forum for a specific product called FortiDNS whereas this is a FortiOS / FortiGate question.  I would recommend reposting in the FortiOS Firewall Forum

    zeno
    zenoAuthor
    New Member
    November 2, 2018

    Hi

     

    Okay thanks