resolve hostname and ip address in vpn site to site

Forum|Forum|5 years ago
August 24, 2021
9 replies
13333 views

Hi, I have a site-to-site vpn set up between 2 fortigates: Site A Fortigate 300E and site B Fortigate 60F, and I was able to fill the vpn and the communication between both sites. When I connect to a computer at site A from site B I can do it without problems through the IP, but for security reasons I want them to be able to communicate through the host name. In site A all my computers belong to a domain (mycompany.com.mx) but in my site B the computers are not within a domain. Is it possible to get site B computers to access site A computers by hostname and not just by IP? I hope you can help me Thank you

6.4

Best answer by ac1

You have two ways:

[ol]

Configure the DHCP in site B with DNS from the domain A - in this case any DNS request go through the tunnel VPN. In site A you must add the network of site B to AD Site and Services.

Configure the DHCP in site B with DNS the FGT B - Enable the relay DNS for the request with domain mycompany.com.mx to the DNS in site A[ol]

Enable DNS Server in FGT B (System > Feature Visibility > Additional Features > DNS Database)

From Network > DNS Servers configure DNS Zone with domain name .com.mx, enable DNS Forwarder and set ip of DNS in site A

Select in DHCP Server DNS Server "Same as interface IP"[/ol][/ol]

bhuo

New Member

Hi,

Site B computers need to be able to access a none domain joined DNS server via s2s VPN.

For example if you are able to add those A records to Fortigate and set up Fortigate address as DNS address for Site B computer to use, it may solve your case, good luck.

Thanks,

BH

ac1Answer

Explorer III

You have two ways:

[ol]

Configure the DHCP in site B with DNS from the domain A - in this case any DNS request go through the tunnel VPN. In site A you must add the network of site B to AD Site and Services.

Configure the DHCP in site B with DNS the FGT B - Enable the relay DNS for the request with domain mycompany.com.mx to the DNS in site A[ol]

Enable DNS Server in FGT B (System > Feature Visibility > Additional Features > DNS Database)

From Network > DNS Servers configure DNS Zone with domain name .com.mx, enable DNS Forwarder and set ip of DNS in site A

Select in DHCP Server DNS Server "Same as interface IP"[/ol][/ol]

AC

Cruz2019Author

New Member

In my site B, I have an interface such as LAN 192.168.xx.xx, and within this same interface I have created a VLAN (172.16.xx.xx) to all the equipment in site B I assigned a fixed IP of this VLAN, then Is it necessary to change this VLAN so that it assigns DHCP to the computers and put the DNS of missite A?

Sign up

Login with SSO

Login to the community

Login with SSO