As soon as i connect and do 'nslookup microsoft. com ' what is sent to the dns server set by fortigate settings is microsoft. com. domain. local and of course this fails. Before upgrading to 6. 4 (from 6. 0), i was able to set dns suffix (option 15) in gui for dhcp for each scope. None of my devices on any of the vlans appear to be getting a. This article describes how setting the dns suffix can be useful when it is required to resolve server names without typing the entire domain name when connected via ipsec dial. By appending a dns suffix to unqualified domain names (such as hostnames), it enables end systems to generate fqdns required for dns resolution. When a dns suffix is configured for. You can specify a domain name suffix in a dhcp address pool on the fortigate dhcp server. With this suffix assigned, the client only needs to input part of a domain name,. Domain name suffix for the ip addresses that the dhcp server assigns to dhcp clients. If you’re using the ssl vpn on fortigate and need to add your active directory domain, here is the cli commands.

Ipsec vpn with external dhcp service you can use an external dhcp server to assign ip addresses to your ipsec vpn clients. This is a common scenario found in.

-