Forward domain specific DNS requests over IPsec tunnel

[tzvikaz]

Topology is as follows:

Site A: subnet 192.168.1.0/24. has a fortigate appliance (FortiOS7). It has no servers on it and no DNS servers. Desktops are assigned IP address by HTTP.

Site B: subnet 192.168.2.0/24. has no desktops, only server. has a checkpoint appliance. has a domain controller and DNS server in it (192.168.2.10). the domain there is site-b.loc

Site A is connected to site B via IPsec site to site VPN.

What is the best way to have any desktop on site A reach anything on the internet using the ISP DNS server for example, but have anything on site-b.loc request the DNS server on site B.

[ebilcari · Accepted solution]

You can do this with alt-dns or local dns. This articles describe the needed steps.

[tzvikaz]

Thanks. I saw those articles but I wasn't sure how exactly. I will give it a try and circle back.