Fortigate IPSEC tunnel allow gateways to communicate

[nsumner]

I want to set the DNS on my fortigate to the interal DNS in a second site. But although I have a working IPSEC VPN tunnel the fortigate itself is unable to access the remote subnet. How can I resolve this issue?

[rwpatterson]

Open a policy on the remote tunnel that allows the interface IP into the DNS server. The FGT comes across with that IP, not the LAN on that unit.

HTH

[MikePruett]

Yeah, sounds like a policy issue (if the tunnel is actually building properly)