DNS and site to site Policy-based Zywall replies
USG FLEX 200H V1.21(ABWV.0)ITS-24WK35-0813-240800592
So here is a quick show of the problem with Policy-based site to site with DNS
FLEX200H
local 192.168.138.0/28
remote 192.168.144.0/24
USG40 192.168.144.0/24 >192.168.255.243 > FLEX200H 192.168.255.235 > 192.168.138.2
When a IP from 192.168.144.0/24 send dns to 192.168.138.2 it goes down the tunnel but instead of going to 192.168.138.2 the FLEX200H replies when I want 192.168.138.2 to get the query and reply.
Workaround use Route-based
All Replies
-
Hi @PeterUK,
May I know the DNS server setting on this interface 192.168.138.0/28? Is it custom defined or ZyWall?
0 -
As in 192.168.138.2 has a DNS server not by Flex200H but a device that can handle DNS which I want it to handle DNS and not the Flex200H but when a do DNS the Flex200H replies instead of sending it to 192.168.138.2
on say 192.168.144.0/24 I do nslookup grc.com 192.168.138.2 this should go to the DNS server but FLEX200H intercepts it a replies instead.
0 -
Hi @PeterUK,
For further investigation, could you share the configuration of FLEX 200H? Also, the DNS server setting of this client is 192.168.138.2, am I correct?
0 -
I send you the config when other things have been checked 192.168.138.2 has BIND being the DNS server I wish for clients to use over the tunnel
I have three tunnels but currently using the work around as said above
FLEX200H
local 192.168.138.0/28
remote 192.168.144.0/24local 192.168.138.0/28
remote 192.168.141.0/24local 192.168.138.0/28
remote 192.168.145.0/24When a client from remote dose DNS to 192.168.138.2 the FLEX200H replies with it system DNS and not to 192.168.138.2 DNS server
0 -
PM sent
0
Categories
- All Categories
- 414 Beta Program
- 2.3K Nebula
- 132 Nebula Ideas
- 92 Nebula Status and Incidents
- 5.4K Security
- 181 USG FLEX H Series
- 258 Security Ideas
- 1.4K Switch
- 71 Switch Ideas
- 1K Wireless
- 37 Wireless Ideas
- 6.2K Consumer Product
- 236 Service & License
- 372 News and Release
- 79 Security Advisories
- 24 Education Center
- 5 [Campaign] Zyxel Network Detective
- 2.9K FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 80 About Community
- 69 Security Highlight