We help IT Professionals succeed at work.

We've partnered with Certified Experts, Carl Webster and Richard Faulkner, to bring you two Citrix podcasts. Learn about 2020 trends and get answers to your biggest Citrix questions!Listen Now


Can only ping by FQDN between two different domains

markithomas asked
Medium Priority
Last Modified: 2010-03-18
I have two different sites connected via an IPSec LAN to LAN VPN.  I am able to browse shares, printers, terminal services etc but only by IP and FQDN.  At each site there is a dns server and that resolves names for the internet and LAN resources local to each site.  the DNS set up has forwarders pointing to each office DNS server, and I have added secondary zones which are copies of the others primary zones, but still I can only ping by FQDN.  eg ping server1 timesout, ping server1.domain.com gets a reply.

I have trawled through other solutions all day, if there is a solution out there I can't see it and I am sure it's not too big a problem to someone!

Watch Question

is this tunnel using software or hardware?
Try and configure Reverse lookup zones also, and see how it goes.



the tunnel is a hardware tunnel


I created reverse zone but can only create a stub zone, it won't create a secondary and still can only ping to the server.domain.com

Most Valuable Expert 2019
Most Valuable Expert 2018
A reverse lookup zone won't help you anything here. Your problem is that the client doesn't know which DNS suffixes it should check.
One way is to add the DNS suffix of the respective other domain on the clients in the Advanced settings of the TCP/IP properties (in the DNS tab). Make sure you add the client's own primary domain suffix in the list as first entry. Test this on a client before you roll it out.
Another possibility, if the host names in both domains are unique, is to use a WINS server for each site (and let the clients point to it) and let them replicate with each other.

Not the solution you were looking for? Getting a personalized solution is easy.

Ask the Experts


thanks, that seems to work after a quick test, is there a way to update the dns suffixes automatically with dhcp?  I don't fancy changing all the machines individually.  I don't fancy the idea of WINS, it seems a bit retro, like going back to NT 4 but if thats what it takes then thats what it needs.
look in the settings of the Hardware and make sure icmp is turned on.
Most Valuable Expert 2019
Most Valuable Expert 2018

Not with DHCP, sorry; this applies to Server 2003, but might work with XP clients as well:
New group policies for DNS in Windows Server 2003

If this doesn't work for XP, here's (among other methods) a VB script that you could use in a GPO as computer(!) startup script:
How to configure a domain suffix search list on the Domain Name System clients

As for WINS, if you don't use it, make sure NetBIOS over TCP/IP is disabled, as  you'll have the NetBIOS name resolution broadcast traffic otherwise. If you're using Exchange, you might want to reconsider the use of WINS, though:
Exchange Server 2003 and Exchange 2000 Server require NetBIOS name resolution for full functionality
split points :)
Access more of Experts Exchange with a free account
Thanks for using Experts Exchange.

Create a free account to continue.

Limited access with a free account allows you to:

  • View three pieces of content (articles, solutions, posts, and videos)
  • Ask the experts questions (counted toward content limit)
  • Customize your dashboard and profile

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.


Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.