New Member

Question

Many "DNS-no-domain" errors

14 replies
40962 views

Dear,

Analyzing the logs on my WLAN I see hundreds of repeated error messages. Failure Details:

Action: DNS-no-domain Reason: Server 120.64.11.10 replied "non-existing domain" Message: DNS lookup of from client failed with "non-existing domain"

This type of error is displayed for all APs. In "Reason" the IP varies a bit. Any idea what that might be?

Best Regards

André

6.0

hixeN

New Member

Hello, I have the same problem of you andre.amaro i see theses logs in my fortiGate/Logs/Wifi Events. You or another one did find the resolution ? With the support i hide theses logs on my fortiGate to avoid so many entries in my fortianalyzer. But still i think i have problems with my clients in wifi and i think theses logs are the problem. Regards, Guillaume

boneyard

Valued Contributor

can you share some of the DNS entries which are reported for this?

it can just be the client is requesting non existing hostnames.

hixeN

New Member

Hello Boneyard,

Yes sure, thank you for your help.

I haven't theses entries for lan interfaces for exemple. We only see in log/wifi events that's why i was think problem was on the wifi configuration.

Regards,

Guillaume

wifi events.jpg

goback

New Member

Server replied "non-existing domain" for NTS2000.nts2000.lan

I've had the same issue and wanted to post my solution

The Wifi SSID uses WPA2 with an NPS as radius server. This is a windows server who's own microsoft certificates are renewed sometimes. SInce the same server also has a custom *.domain.lan NPS chooses this certificate as the new certificate. -> I believe this wildcard certificate is responsible for the NTS2000.nts2000.lan DNS request

After choosing the correct certificate in NPS PEAP authentication the Wifi was back up and running

jecker

Visitor III

Hello, i'm facing a similar issue. Doesn't happen all the time but is happening from time to time.

Can you elaborate on what you selected for "correct certificate" in NPS?

I believe I have the correct certificate and it is working most of the time.

Thanks.

cerfrance85

New Member

I have the same problem too.
From time to time, some stations can't connect to Wi-Fi and the message is "Wireless station DNS process failed due to non-existing domain."
After restarting the Wi-Fi station, it works, but it's annoying.

Sign up

Login with SSO

Login to the community

Login with SSO