Technical Tip: How to add multiple dns-suffix in SSL VPN setting of FortiGate unit

[caunon]

Description

This article describes the procedure to add multiple dns-suffix in the SSL-VPN settings of the FortiGate unit.

In some situations, multiple dns-suffix needs to be added in SSL-VPN for any reason.

For example, the SSL-VPN client of IOS can not solve the name to access the internal server.
And there might be many domain names of the internal servers.

Scope

FortiGate v6.4.x.

Solution

- Adding of multiple dns-suffix in SSL VPN can be done in 3 patterns as below.

- It can be done via CLI commands in one of the ways.

CLI commands:

The solution to fix the issue:

Pattern 1:

# config vpn ssl settings

     set dns-suffix “test1.com test2.co.uk test3.net”

  end

Pattern 2:

# config vpn ssl settings

     set dns-suffix test1.com;test2.co.uk;test3.net

  end

Pattern 3:

# config vpn ssl settings

     set dns-suffix “test1.com; test2.co.uk; test3.net”

  end