FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
carabhavi
Staff
Staff
Article Id 198129
Description
This article describes the steps to configure multiple DNS server for IPSec dial-up VPN.

Solution
Up to 3 IPv4 DNS server and 3 IPv6 DNS server for dial-up tunnel can be configured.

In GUI, specify only 1 DNS server IP and via CLI, configure up to 3 server IP’s

In GUI, configure DNS at the time of initial configuration. If post configuration, process via CLI only.

By default, DNS mode will be set to auto.

CLI:
#config vpn ipsec phase1-interface
  edit <tunnel_name>
      set dns-mode manual 
      set ipv4-dns-server1 0.0.0.0
      set ipv4-dns-server2 0.0.0.0
      set ipv4-dns-server3 0.0.0.0
      set ipv6-dns-server1 ::
      set ipv6-dns-server2 ::
      set ipv6-dns-server3 ::
  next
end

Contributors