Skip to Content

Solved: How do I configure DNS Service in Non-Recursive Mode with Public DNS Database on FortiExtender?

By: Author Alex Lim

Posted on  - Last updated:

Categories Troubleshooting

When DNS service is on Non-Recursive mode, FortiExtender interface firstly query local public DNS database. If no naming resolution in local public DNS database, the DNS query will return response without naming resolution.

Scope

FortiExtender DNS proxy service in Non-Recursive mode.

Solution

Step 1: On FortiExtender go to Networking > DNS Servers.

On FortiExtender go to Networking > DNS Servers.

Step 2: Create DNS Service with Non-Recursive mode.

Create DNS Service with Non-Recursive mode.

Step 3: On CLI, check DNS proxy service.

On CLI, check DNS proxy service.

Step 4: On CLI, check DNS server in DNS server pool.

On CLI, check DNS server in DNS server pool.

Step 5: On client, send DNS request. If the request has naming resolution in public DNS database.

On client, send DNS request. If the request has naming resolution in public DNS database.

Step 6: On FortiExtender, DNS log message displays the processing on Non-Recursive mode.

On FortiExtender, DNS log message displays the processing on Non-Recursive mode.

Step 7: On client, send DNS request. If the request has NO naming resolution in public DNS database, DNS query will return empty (No Naming Resolution Response).

On client, send DNS request. If the request has NO naming resolution in public DNS database, DNS query will return empty (No Naming Resolution Response).

Step 8: On FortiExtender, Debug log message shows the sequence of DNS processing in Non-Recursive mode.

On FortiExtender, Debug log message shows the sequence of DNS processing in Non-Recursive mode.