Skip to main content
preyes
preyes
New Member
June 30, 2020
Question

SSL VPN No local DNS

  • June 30, 2020
  • 2 replies
  • 35971 views

Hi there, newbie here in the Fortinet world.

 

Our HO has FortiGate 200 running ver 6.4

 

I am also using FortiClient 6.4; I downgraded to FortiClient version 6.0 and it work fine; but I can not believe that this problem exists since version 6.2 and nobody noticed.

 

I have a SSL VPN configured which connects fine; but is does not transfer the local dns server info to the remote user. 

 

What can be the problem?

 

Thanks in advanced.

    2 replies

    oscar37
    oscar37
    New Member
    June 30, 2020

    do you have DNS server set to your local dns in your SSL VPN settings? 

     

    #config vpn ssl setting     set dns-server1 <LOCAL DNS IP>     set dns-server2 <Local DNS IP>

     

     

    you can also set via GUI from your SSL VPN settings.

     

    Thank you in Advance

    preyes
    preyesAuthor
    New Member
    July 1, 2020

    Thanks for the quick reply.

    I have configured under Split DNS (SSL-VPN Portal)

    Primary DNS (local primary dns server) and Secondary DNS (local secondary dns server)

    isamt
    isamt
    New Member
    July 1, 2020

    Configure DNS for SSL Vpn under config vpn ssl settings.

     

    config vpn ssl settings    set dns-suffix "Domain_Name"    set dns-server1 192.168.1.1

       set dns-server2 192.168.1.2

     

    You should also configure dns-suffix, otherwise vpn clients will only be able to ping IP addresses or fully qualified host names.

    So i you have a server named intranet.domain.com on IP 192.168.1.100 vpn users can ping 192.168.1.100 and intranet.domain.com but not hostname intranet unless you set the dns-suffix to "domain.com"

     

    browners80
    browners80
    New Member
    March 29, 2021

    Setting the dns-suffix via cli sorted it for me.  

     

    Thanks guys

    Terms & ConditionsAccessibility statement