DNS for local IPs without Domain name

[rak]

Hello guys, am a new kid in the block. Own a FG40C since a few weeks. 1st firewall at all. I learn fast, but I am stuck. I have a relay DNS on my FG to resolve local IPs. Works so far. fortigate.klueber.name -> 192.168.0.1 Is there a chance to resolve a name without the domain name like fortigate -> 192.168.0.1 Help appretiated. Kind regards Ralf

[emnoc]

Yes and that' s typically done under the client domain search list. You could fo example seed a fictious domain and then apply that on the fgt dns server and set the clients search list; # # search home.local home2.local domain home.local nameserver 172.16.12.1 So if they client searches, he searches in home.local or home2.local in that order and if he doesn' t provide the full domain name. And to add, if your doing DHCP, than you can provide the client his domain and if the search domainlist is enabled, the client would automatically do what I described above.

[Uwe_Sommerfeld]

If you use your FortiGate as DHCP you can set the domain via # config system dhcp server # edit 1 # set domain abcd.local If I remember correctly. :)

[GusTech]

Else, if you have a domain/DNS / WINS server you can manually static add it.

[rak]

Thanks for your help. I tried to implement it as follows:

 # show
 config system dhcp server
     edit 6
         set auto-configuration disable
         set default-gateway 192.168.xx.yy
         set dns-service default
         set domain " home.local" 
         set interface " VLAN_YY" 
             config ip-range
                 edit 1
                     set end-ip 192.168.xx.254
                     set start-ip 192.168.xx.2
                 next
             end
         set netmask 255.255.255.0
     next
 end
 
 FGT40C3912020026 (6) # end
 
 FGT40C3912020026 # execute ping fritzbox.home.local
 PING fritzbox.klueber.name (192.168.xx.4): 56 data bytes
 64 bytes from 192.168.xx.4: icmp_seq=0 ttl=64 time=5.0 ms
 64 bytes from 192.168.xx.4: icmp_seq=1 ttl=64 time=2.4 ms
 
 --- fritzbox.klueber.name ping statistics ---
 2 packets transmitted, 2 packets received, 0% packet loss
 round-trip min/avg/max = 2.4/3.7/5.0 ms
 
 FGT40C3912020026 # execute ping fritzbox
 Unable to resolve hostname.
 

Any idea?

[rwpatterson]

Perhaps you need the ' .' at the end of the DNS host name in the FGT? I know in the Windows world, that trailing dot matters. Did you set the DNS domain name in the FGT config screen?

[rak]

Did you set the DNS domain name in the FGT config screen?

Thats it. Great. Thank you a lot.

[rwpatterson]

You' re welcome. Now go enjoy the weekend.