Technical Tip: Implement split DNS for Local and Global domain

[iskandar_lie]

Description	This article describes how to implement split DNS for Local and Global domain.
Scope	FortiGate DNS feature version 7.2.1.
Solution	Scenario: 1) The local DNS server will be used to resolve only the local name server, 2) Global DNS server, in this case, FortiGuard DNS server, will be used to resolve global DNS query. Diagram: Local domain name : 40gate.co.id Secondary DNS server: 172.16.10.254 (IP address of local DNS server). Note. Secondary DNS server showing 'unreachable' is EXPECTED here. Just to only resolve  the local DNS name. Fortigate DNS config: no firewall policy rule is required. User config: set the user to request DNS to the FortiGate DNS interface: 192.168.16.1. Local DNS can successfully be resolved: Global DNS can successfully be resolved: DNS request process on FortiGate. DNS cache. Related documents: https://docs.fortinet.com/document/fortigate/6.2.0/cookbook/960561/fortigate-dns-server https://docs.fortinet.com/document/fortigate/6.2.0/cookbook/121810/using-a-fortigate-as-a-dns-server https://community.fortinet.com/t5/FortiGate/Technical-Tip-DNS-database-with-FortiGate-as-a-slave-to-... https://community.fortinet.com/t5/FortiGate/Implement-Fortigate-as-a-Local-DNS-server-database/ta-p/...