USG Lite 60AX DNS issues

SistemistaDaRidere

I recently installed a USG Lite 60AX and configured static IP on WAN interface with manual DNS (primary 8.8.8.8 - secondary 1.1.1.1).

Since i couldn't establish an IPSEC vpn using remote peer FQDN, i checked dns lookup and found out that it's resolving a really old public IP for the FQDN. VPN establish correctly if pointing directly to the FQDN updated public IP.

Clearly, FQDN is always up to date and correctly resolved from any other location, but not from the USG.

Also noticed that it make dns query on itself and i'm wondering why, i tried switching on DHCP for WAN and releasing the same public DNS choice from my router, but same issue.

Internet access come from an LTE tplink router working on a big national provider (Italy - TIM) in CGNAT. Even tried setting up ISP DNS but, again, same issue.

WAN Interface

DNS Lookup results

PeterUK

Can you check from a device other then USG Lite 60AX by

nslookup FQDN 8.8.8.8

SistemistaDaRidere

https://community.zyxel.com/en/discussion/comment/83905#Comment_83905

you mean behind the lte router?

PeterUK

yes

Zyxel_Tina

Hi @SistemistaDaRidere,

As PeterUK suggested, could you try running nslookup from another device to check the DNS resolution result?

If it resolves to the correct/updated IP address, please enable Zyxel Support Access and share your org/site names so we can further investigate this issue on your USG LITE 60AX device.