Domain Zone Forwarders not working
![nick_patchett](https://us.v-cdn.net/6029482/uploads/defaultavatar/nN4PAQRO7TCNP.jpg)
![](https://www.zyxel.com/library/assets/zyxel-forum/freshman_member.png)
![First Comment](https://us.v-cdn.net/6029482/uploads/badges/MBNFIRD87YVH.png)
![Fifth Anniversary](https://us.v-cdn.net/6029482/uploads/badges/BCDCTZ34UNQW.png)
![Zyxel Certified Network Administrator - Nebula](https://us.v-cdn.net/6029482/uploads/badges/80K4CA6WSCDB.png)
![Zyxel Certified Sales Associate](https://us.v-cdn.net/6029482/uploads/badges/T8OIUCS56TCY.png)
Has anyone use Domain Zone Forwarders on the Flex H range to direct specific requests to different DNS servers?
I have had to open a ticket as it doesnt appear to be working on my FLEX 700H when directing DNS requests for the nhs.uk domain to a DNS server accessible via an IPSEC VPN.
My static routes are in and working as DNS resolution works ok if I statically assign the DNS servers to my laptop.
All Replies
-
Did you have this problem with a non H model of USG?
0 -
This is a brand new installation so there has never been any other firewall installed.
0 -
I think I have seen this problem before which it can't be done due to you not being able to set Query Via VPN I think I worked out a workaround I see if I can find the post....
0 -
can't find this old post about.
So this is a site to site VPN?
0 -
Yeah it's an IPSEC VPN and I need to query a DNS server at the other end of a tunnel.
This is how I've set it up
0 -
You seem to have a VTI setup but I don't see how to set it up I got no add button
0 -
The VTI was created automatically when I created the IPSEC VPN
0 -
I see different to other models so the setup is site to site Route-Based not Policy-Based
0 -
SO I finally got it setup with VTI between FLEX200H and USG60W to by Bind server for DNS and it works here.
Their was I static route that was added but I removed it does not seem to need it
Is your VTI Setting Local IP setup for your LAN subnet with a IP not in use?
what is the remote end IP Address Assignment set to for VTI?
0 -
The VTI was all automatically configured by the 700H and is set to a 169 address
0
Categories
- All Categories
- 414 Beta Program
- 2.2K Nebula
- 130 Nebula Ideas
- 88 Nebula Status and Incidents
- 5.4K Security
- 166 USG FLEX H Series
- 255 Security Ideas
- 1.4K Switch
- 71 Switch Ideas
- 999 Wireless
- 36 Wireless Ideas
- 6.2K Consumer Product
- 233 Service & License
- 370 News and Release
- 77 Security Advisories
- 24 Education Center
- 5 [Campaign] Zyxel Network Detective
- 2.9K FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 80 About Community
- 69 Security Highlight