Table of Contents
< All Topics
Print

[IAG] After using IAG as a DNS server, the intranet terminal devices cannot perform domain name resolution normally – DNS service is not enabled

Problem Description

The IAG needs to be used as the DNS server for intranet terminal users, but the domain name cannot be resolved normally after the IAG's LAN port address is filled in as DNS

Process——

  1. The intranet terminal device and the LAN port address of the IAG can communicate normally

  2. The IAG device does not intercept the relevant permission policies and firewall rules for intranet users

  3. The IAG device itself can resolve and access domain names normally

  4. Checked the IAG version is 12.0.12, but the DNS service in the advanced options is not enabled

    63155d5038374d472.png (102.04 KB)

solution

After checking the DNS service option, the intranet terminal devices can perform domain name resolution and access normally.

Suggestions and Conclusion

When you need to use the IAG/SG device as a DNS server, please note that after IAG12.0.7 version, you can turn on or off [Enable DNS Service] in [System Management] – [System Configuration] – [Advanced Configuration] – [DNS Service]

Original Link

https://support.sangfor.com.cn/cases/list?product_id=22&type=1&category_id=7059&isOpen=true