Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 27 subscribers
  • Views 13176 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

XG DNS resolution error

Stefan Höhnemann

Hi,

 

i have a problem with DNS resolution on my XG 115, but i think it's a setting mistake.

 

VLAN 1:

Client1 - IP 192.168.10.10

DNS: 192.168.10.1

 

VLAN 2:

Client2 - IP 192.168.20.10

DNS: 192.168.20.10

 

FW Rule: ICMP, DNS, RDP allowed

 

Client1:

nslookup Client2 - non-authoritative answer 192.168.20.10

ping Client2 -> unknown DNS Name

ping 192.168.20.10 -> successful

nslookup 192.168.20.10 -> DNS 192.168.20.1 / 192.168.20.10

mstsc /v Client2 -> nothing

mstsc /v Client2 -> successful

 

What is the correct setting to get correct DNS information from other VLAN?

 

Thanks in advance for your support.

 

Regards,

Stefan



This thread was automatically locked due to age.
Parents
  • 0

    Stefan,

    if the DNS IP is the XG interface, make sure that the DNS service is allowed on the proper zone (Administration > Device acces).

    If the DNS is located on another zone, make sure proper firewall rule is created (allow DNS traffic).

    Use tcpdump to understand what's wrong.

    Regards

  • 0 in reply to lferrara

    Hi lferrara,

     

    i checked your points and it's confused:

    Ping Client2 - empty

    Ping Client2. (with Point as last character) - DNS, RDP - all is fine

     

    I checked ethernet connection settings - DNS Suffix is empty.

    No Domain names set into the firewall.

     

    Any ideas?

     

    Regards,

    Stefan

Reply
  • 0 in reply to lferrara

    Hi lferrara,

     

    i checked your points and it's confused:

    Ping Client2 - empty

    Ping Client2. (with Point as last character) - DNS, RDP - all is fine

     

    I checked ethernet connection settings - DNS Suffix is empty.

    No Domain names set into the firewall.

     

    Any ideas?

     

    Regards,

    Stefan

Children