dns over ipsec

[kstueren]

Hello,

Is there any option to set up RoadWarrior or Site-to-site IPsec VPN so it can resolve the localhost PC name?

On-site A I have IP 10.50.0.1/16 on the LAN interface, DNS uses fortiguard servers for DNS because I use forti DDNS for VPN. Roadwarrior is connecting to Site A. DHCP is on Fortigate.

On-site B I only use IPsec for site-to-site VPN to site A. IP 192.168.1.1/24. DNS use fortiguard servers for DNS because I use forti DDNS for VPN. DHCP is on Fortigate.

I don't have AD or any domain on both sites, all computers are in the workgroup. Is there any option that the computer from roadwarrior of Site B can resolve the computer on-site A?

thanks

[akristof]

Hello,

You can build DNS database on FortiGate:

https://docs.fortinet.com/document/fortigate/6.2.0/cookbook/960561/fortigate-dns-server

Then you can change DNS on DHCP to be FortiGate and local domain will be resolved by FortiGate, everything else can be forwarded to other DNS servers.